Apr 20, 2026 • Joshua Martinelle
Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint
Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication...
Summary
Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. Joshua Martinelle Mon, 04/20/2026 - 10:51
Published Analysis
Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. Joshua Martinelle Mon, 04/20/2026 - 10:51 Flowise - PII Disclosure on Unauthenticated Forgot Password Endpoint The NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. Joshua Martinelle Mon, 04/20/2026 - 10:51