CVE-2026-44352: Broken Access Control in Flowsint Sketch Logs

Successful exploitation of CVE-2026-44352 allows unauthorized users to access sketch logs within Flowsint. These logs may contain sensitive information related to OSINT investigations, including user activity, data sources, and analysis results. An attacker could use this information to gain insights into an organization's security posture, identify potential targets, or even compromise user accounts. The blast radius extends to any user who relies on the confidentiality of their sketch logs.

1. Veröffentlicht2026-05-12

The primary mitigation for CVE-2026-44352 is to upgrade Flowsint to version 1.2.3 or later. Until upgraded, implement strict access controls to restrict access to sketch logs based on user roles and permissions. Regularly review and audit user access rights to ensure that only authorized personnel can access sensitive data. There are no specific WAF rules or detection signatures readily available, so focus on patching and access control configuration. After upgrading, confirm the fix by attempting to access sketch logs with a user account that should not have access.