From 24a17bdaf424f5eead103818917613d51f989943 Mon Sep 17 00:00:00 2001
From: Harshit Jain <harshitjain0562@gmail.com>
Date: Thu, 26 Feb 2026 19:03:49 +0530
Subject: [PATCH] fix: langfuse trace leak key on model params

---
 litellm/integrations/langfuse/langfuse.py | 25 +++++++++++++++++++----
 1 file changed, 21 insertions(+), 4 deletions(-)

diff --git a/litellm/integrations/langfuse/langfuse.py b/litellm/integrations/langfuse/langfuse.py
index 9d6ddd0f1e9..e2db8be0450 100644
--- a/litellm/integrations/langfuse/langfuse.py
+++ b/litellm/integrations/langfuse/langfuse.py
@@ -25,6 +25,7 @@ from litellm.litellm_core_utils.core_helpers import (
     reconstruct_model_name,
     filter_exceptions_from_params,
 )
+from litellm.litellm_core_utils.model_param_helper import ModelParamHelper
 from litellm.litellm_core_utils.redact_messages import redact_user_api_key_info
 from litellm.integrations.langfuse.langfuse_mock_client import (
     create_mock_langfuse_client,
@@ -291,8 +292,6 @@ class LangFuseLogger:
 
             functions = optional_params.pop("functions", None)
             tools = optional_params.pop("tools", None)
-            # Remove secret_fields to prevent leaking sensitive data (e.g., authorization headers)
-            optional_params.pop("secret_fields", None)
             if functions is not None:
                 prompt["functions"] = functions
             if tools is not None:
@@ -505,13 +504,18 @@ class LangFuseLogger:
             kwargs.get("model", ""), custom_llm_provider, metadata
         )
 
+        # Use whitelisted model parameters to prevent leaking secrets
+        sanitized_model_params = ModelParamHelper.get_standard_logging_model_parameters(
+            optional_params
+        )
+
         trace.generation(
             CreateGeneration(
                 name=metadata.get("generation_name", "litellm-completion"),
                 startTime=start_time,
                 endTime=end_time,
                 model=model_name,
-                modelParameters=optional_params,
+                modelParameters=sanitized_model_params,
                 prompt=input,
                 completion=output,
                 usage={
@@ -831,13 +835,26 @@ class LangFuseLogger:
                 kwargs.get("model", ""), custom_llm_provider, metadata
             )
 
+            # Use whitelisted model_parameters from StandardLoggingPayload
+            # to prevent leaking secrets (api_key, auth headers, etc.)
+            if standard_logging_object is not None:
+                sanitized_model_params = standard_logging_object.get(
+                    "model_parameters", optional_params
+                )
+            else:
+                sanitized_model_params = (
+                    ModelParamHelper.get_standard_logging_model_parameters(
+                        optional_params
+                    )
+                )
+
             generation_params = {
                 "name": generation_name,
                 "id": clean_metadata.pop("generation_id", generation_id),
                 "start_time": start_time,
                 "end_time": end_time,
                 "model": model_name,
-                "model_parameters": optional_params,
+                "model_parameters": sanitized_model_params,
                 "input": input if not mask_input else "redacted-by-litellm",
                 "output": output if not mask_output else "redacted-by-litellm",
                 "usage": usage,