Product
An improper access control vulnerability in Langfuse allows unauthenticated attackers to hijack Slack integrations and exfiltrate sensitive project prompt data via the /api/public/slack/install endpoint.