What’s Vulnerable › Vulnerabilities

CVE-2026-44352: Flowsint: Broken Access Control allows reading of sketch logs from any user

• Severity: medium (CVSS 5.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-12 · updated 2026-10-26
• Weakness: CWE-284

Description

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, Broken Access Control allows reading of sketch logs from any user. This vulnerability is fixed in 1.2.3.

Affected products

• reconurge flowsint: before 1.2.3

References

• https://github.com/reconurge/flowsint/security/advisories/GHSA-9r98-g8q5-cpq5
• https://github.com/reconurge/flowsint/security/advisories/GHSA-9r98-g8q5-cpq5

Get alerted when CVE-2026-44352 or the next vulnerability affects your stack