← Back to BrewedIntel
otherlow

Apr 20, 2026 • Joshua Martinelle

Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint

Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication...

Source
Tenable Research Advisories
Category
other
Severity
low

Summary

Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. Joshua Martinelle Mon, 04/20/2026 - 10:51

Published Analysis

Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. Joshua Martinelle Mon, 04/20/2026 - 10:51 Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. Joshua Martinelle Mon, 04/20/2026 - 10:51