PT-2025-40411 · Flock Safety · Bravo Edge Ai Compute Device+3

Gainsec · Published 2025-10-02 · Updated 2026-04-22 · CVE-2025-59405

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Flock Safety Peripheral version 7.38.3

Description The Flock Safety Peripheral application for Android contains a cleartext DataDog API key within its codebase. Attackers can recover the OAuth secret without special privileges by decompiling or inspecting the application binaries. This secret is intended to remain confidential and should not be embedded directly in client-side software. The application is installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-59405

Affected Products

Bravo Edge Ai Compute Device

Falcon License Plate Readers

Flock Safety Peripheral

Sparrow License Plate Readers

References · 12

• 🔥 https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf · Exploit
• 🔥 https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more · Exploit
• https://osv.dev/vulnerability/CVE-2025-59405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59405 · Security Note
• https://flocksafety.com/products · Note
• https://flocksafety.com/products/license-plate-readers · Note
• https://t.me/cveNotify/140249 · Telegram Post
• https://twitter.com/CVEnew/status/1973802344652374282 · Twitter Post
• https://t.me/CVEtracker/33962 · Telegram Post
• https://twitter.com/GainSec/status/1973810429253369900 · Twitter Post
• https://twitter.com/Hannibal9972485/status/2047083042473140312 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1973954875080761533 · Twitter Post