CVE-2026-37012
A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via hardcoded API credentials.
- Published Aug 27, 2026
- CVSS 7.5 high
- 0.5% chance of exploitation in the next 30 days (EPSS)