CVE-2025-59405

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompiled or inspected, attackers can recover the OAuth secret without special privileges. This secret is intended to remain confidential and should never be embedded directly in client-side software.

• CWE-200

• https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/Exploit, Third Party Advisory
• https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdfExploit, Third Party Advisory
• https://www.flocksafety.com/productsProduct
• https://www.flocksafety.com/products/license-plate-readersProduct

Published

Oct 2, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-59398The OCPP implementation in libocpp before 0.26.2 allows a de…3.1
• CVE-2025-59399libocpp before 0.28.0 allows a denial of service (EVerest cr…3.1
• CVE-2025-5940The Osom Blocks – Custom Post Type listing block plugin for …5.4
• CVE-2025-59402Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_…5.4
• CVE-2025-59403The Flock Safety Android Collins application (aka com.flocks…9.8
• CVE-2025-59404Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_…7.5
• CVE-2025-59406The Flock Safety Pisco com.flocksafety.android.pisco applica…6.2
• CVE-2025-59407The Flock Safety DetectionProcessing com.flocksafety.android…9.8
• CVE-2025-59408Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_…7.3
• CVE-2025-59409Flock Safety Falcon and Sparrow License Plate Readers OPM1.1…7.5
• CVE-2025-5941Netskope is notified about a potential gap in its agent (NS …2
• CVE-2025-59410Dragonfly is an open source P2P-based file distribution and …3.7