CVE-2026-44352CWE-284

Flowsint: Broken Access Control allows reading of sketch logs from any user

Medium · published May 12, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, Broken Access Control allows reading of sketch logs from any user. This vulnerability is fixed in 1.2.3.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00351 · 27.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-05-12T22:55Z
EPSS history
Timeline
  • 12 MAY 22:55Z
    Flowsint: Broken Access Control allows reading of sketch logs from any user
    cvelistv5