CVE-2026-3269: PSI Probe Denial of Service Vulnerability in psi-probe-core
Summary
CVE-2026-3269: PSI Probe: Broken access control can lead to DoS. Affects com.github.psi-probe:psi-probe-core versions < 5.3.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
PSI Probe is an open-source monitoring tool for Java applications, providing insights into application performance and resource usage. The psi-probe-core component is responsible for session management and handling requests related to application sessions. This package is widely used in Java environments to facilitate monitoring and management tasks.
Vulnerability Detail
A broken access control vulnerability has been identified in PSI Probe versions up to 5.3.0, specifically in the handleRequestInternal function of the ExpireSessionsController.java file. This flaw allows an attacker to manipulate session handling, potentially leading to a denial of service (DoS) condition. The vulnerability can be exploited remotely, making it critical for users to address it promptly. The vendor was notified but did not respond, indicating a lack of support for this issue.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the affected endpoints by implementing additional security measures, such as IP whitelisting or using a web application firewall (WAF) to filter requests.
Conclusion
The CVE-2026-3269 vulnerability in PSI Probe poses a risk of denial of service due to broken access control. Users are advised to update to version 5.3.1 or later to mitigate this risk. Temporary workarounds can be implemented while awaiting updates.
See every vulnerability recorded for com.github.psi-probe:psi-probe-core →
FAQ
CVE-2026-3269 is a vulnerability in the PSI Probe monitoring tool that allows for denial of service due to broken access control.
The vulnerability affects PSI Probe versions up to 5.3.0.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The CVSS score of this vulnerability is 4.3, indicating a low severity level.
If an immediate update is not possible, consider implementing security measures such as IP whitelisting or using a web application firewall to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for com.github.psi-probe:psi-probe-core.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
