A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via hardcoded API credentials.
HIGH
Vulnerability intelligence
CVE-2026-37012
CVSS 3.17.5
SeverityHigh
Known exploitedNo
NVD references:
Primary source: NIST National Vulnerability Database