CVE-2026-42158CWE-284

Flowsint: Broken Access Control allows modification of investigation metadata from any user

Low · published May 12, 2026

CVSS v4.0
2.3
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, an adversary with knowledge of an investigation ID, could update the metadata of an investigation of another user. This vulnerability is fixed in 1.2.3.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-05-12T23:01Z
EPSS history
Timeline
  • 12 MAY 23:01Z
    Flowsint: Broken Access Control allows modification of investigation metadata from any user
    cvelistv5