PT-2026-40470 · Flowsint · Flowsint

CVE-2026-44352 · Published 2026-05-12 · Updated 2026-05-13

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Flowsint versions prior to 1.2.3

Description Broken Access Control allows unauthorized reading of sketch logs from any user. This issue affects an open-source OSINT graph exploration tool used for cybersecurity investigation, transparency, and verification.

Recommendations Update to version 1.2.3.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-44352

GHSA-9R98-G8Q5-CPQ5

Affected Products

Flowsint

References · 6

• 🔥 https://github.com/reconurge/flowsint/security/advisories/GHSA-9r98-g8q5-cpq5 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44352.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-44352 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44352 · Security Note
• https://t.me/CVEtracker/53583 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2054381504042533216 · Twitter Post