Flocksafety vulnerabilities
We track 6 vulnerabilities in Flocksafety products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on October 2, 2025.
Latest Flocksafety vulnerabilities
- 7.5 High severity
License Plate Reader Firmware: Cleartext Storage of Sensitive Information
Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware.
- 9.8 Critical severity
Flock Safety: Use of Hard-coded Cryptographic Key
The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) bundles a Java Keystore (flock_rye.bks) along with its hardcoded pass
- 7.5 High severity
Flock Safety: Exposure of Sensitive Information to an Unauthorized Actor
The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) contains a cleartext DataDog API key within in its codebase. Because applica
- 9.8 Critical severity
Flock Safety: Exposed Dangerous Method or Function
The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 with
- 7.3 High severity
Bravo Compute Box Firmware: Use of a Broken or Risky Cryptographic Algorithm
Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections.
- 7.5 High severity
Bravo Compute Box Firmware: Improper Access Control for Volatile Memory Containing Boot Code
Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot (AVB) and allows direct modification of partitions.