Flowsint is an open‑source OSINT graph exploration tool used for cybersecurity investigations. The vulnerability is a broken access control flaw that permits any user with knowledge of an investigation ID to modify the metadata of an investigation belonging to another user. This misuse of the metadata layer can compromise the integrity of investigative records.

Affected deployments are those running reconurge Flowsint versions older than 1.2.3. The flaw exists in the pre‑1.2.3 code base and does not impact the latest version, which incorporates a patch that binds metadata updates to the owning user and verifies proper authorization.

The CVSS score is 2.3, indicating low severity, and the vulnerability is not listed in the CISA KEV catalog. There is no EPSS score available, so the likelihood of exploitation is uncertain. The attack requires knowledge of a valid investigation ID. While the flaw does not lead to code execution, it still permits data tampering that could be harmful to users relying on the accuracy of investigation metadata.