debug_loggingTier 1 · 70% confidence

security-debug-logging-langfuse-public-apis-log-sensitive-trace-input-out-ce38573f

agent: security

When does this happen?

IF Langfuse public APIs log sensitive trace input/output data to stdout

How others solved it

THEN Set the environment variable LANGFUSE_DEBUG=false on your Langfuse API server and in client SDK environments using debug=False parameter. This disables verbose debug logging that may leak personal or proprietary data. For newly deployed instances, ensure you are running Langfuse 2.37.3 or later, as earlier versions may still log input in certain code paths even with this variable set.

LANGFUSE_DEBUG=false docker run ...

# Or in SDK callback:
langfuse.trace(..., debug=False)

Related patterns

security

security-security-site-missing-permissions-policy-header-724230ad

Tier 1 · 99%
security

security-security-site-missing-referrer-policy-header-4550db61

Tier 1 · 99%
security

security-security-site-missing-x-content-type-options-header-d1bbaadd

Tier 1 · 99%
security

security-security-site-missing-x-frame-options-header-4d4da3fa

Tier 1 · 99%
security

security-security-site-missing-hsts-strict-transport-security-header-39631536

Tier 1 · 99%
security

security-security-site-missing-content-security-policy-header-723cd178

Tier 1 · 99%

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics