CVE-2026-30824 - Flowise: Missing Authentication on NVIDIA NIM Endpoints

CVE ID :CVE-2026-30824 Published : 7 Mar 2026, 5:11 a.m. | 18 minutes ago Description :Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. This issue has been patched in version 3.0.13. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...