UNKNOWN NVD
CVE-2026-37012
A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via hardcoded API credentia
A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via hardcoded API credentials.
References
- https://github.com/GreyDGL/PentestGPT/blob/6e84be8df5338b724adfb21c19700dd03547b007/pentes
- https://yerangamage.com/cves/detail/?slug=pentestgpt-hardcoded-credentials
This unknown severity vulnerability was published on 2026-08-27 via NVD.
vulnfeed aggregates 11337 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.