GitHub Advisoryadvisory · Maven

GHSA-rx6w-2w6h-r346 PSI Probe: Broken access control can lead to DoS

LOW Published 2026-02-27 Modified 2026-02-28 Official page ↗
Aliases
CVE-2026-3269
Ecosystem
Maven
Packages
com.github.psi-probe:psi-probe-core
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-285, CWE-404
Reviewed
2026-02-28

Affected packages

• Maven com.github.psi-probe:psi-probe-core: <= 5.3.0 (no fix yet)

Description

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Related

Alias · CVE (1)

  • CVE-2026-3269 A flaw has been found in psi-probe PSI Probe up to 5.3.0. vulnerability

Weakness · CWE (2)

  • CWE-285 Improper Authorization weakness
  • CWE-404 Improper Resource Shutdown or Release weakness

References