CVE-2024-6839 is a vulnerability in flask-cors version 5.0.1 and earlier where improper regex path matching causes less restrictive CORS policies to be applied to sensitive endpoints. This occurs because the plugin prioritizes longer regex patterns over more specific ones, potentially allowing unauthorized cross-origin access to sensitive data or functionality. The issue is fixed in version 6.0.0.