← Back to BrewedIntel
otherlow

Apr 20, 2026 • Joshua Martinelle

Flowise - Missing Authentication on NVIDIA NIM Endpoints

Flowise - Missing Authentication on NVIDIA NIM Endpoints The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware,...

Source
Tenable Research Advisories
Category
other
Severity
low

Summary

Flowise - Missing Authentication on NVIDIA NIM Endpoints The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. Joshua Martinelle Mon, 04/20/2026 - 10:56

Published Analysis

Flowise - Missing Authentication on NVIDIA NIM Endpoints The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. Joshua Martinelle Mon, 04/20/2026 - 10:56 Flowise - Missing Authentication on NVIDIA NIM Endpoints The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. Joshua Martinelle Mon, 04/20/2026 - 10:56