PT-2026-40470 · Flowsint · Flowsint

Published 2026-05-12 · Updated 2026-05-13 · CVE-2026-44352

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Flowsint versions prior to 1.2.3

Description Broken Access Control allows unauthorized reading of sketch logs from any user. This issue affects an open-source OSINT graph exploration tool used for cybersecurity investigation, transparency, and verification.

Recommendations Update to version 1.2.3.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-44352

Affected Products

Flowsint

References · 4

• 🔥 https://github.com/reconurge/flowsint/security/advisories/GHSA-9r98-g8q5-cpq5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44352 · Security Note
• https://twitter.com/VulmonFeeds/status/2054381504042533216 · Twitter Post
• https://t.me/CVEtracker/53583 · Telegram Post