GHSA-5f53-522j-j454: Flowise Missing Authentication on NVIDIA NIM Endpoints
- Identifiers
- CVE-2026-30824GHSA-5f53-522j-j454
- Published
- Record updated
- Affected
- flowise <= 3.0.12
- Fixed in
- 3.0.13
- released February 3, 2026, 31 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 37.3%
Summary
Flowise's global authentication middleware whitelists the `/api/v1/nvidia-nim` route through `WHITELIST_URLS` in `packages/server/src/utils/constants.ts`, so no JWT or API-key check runs for any endpoint under `/api/v1/nvidia-nim/*`, and the controllers in `packages/server/src/controllers/nvidia-nim/index.ts` perform no authentication of their own. Unauthenticated callers can reach `/get-token`, which returns a valid NVIDIA API token, and endpoints that list, start, stop and pull Docker containers and images. The issue is rated CVSS 3.1 8.6 (High) under CWE-306.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- flowisenpmLLM dependency since 2024-03-12
Related items
- HighCVE-2026-65142: NVIDIA Model-Optimizer untrusted data deserializationSame vendor · NVD/CVE Database
- HighGHSA-g28h-2cmm-rj9x: langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputsSame vendor · GitHub Advisory Database
- HighCVE-2026-47625: NVIDIA Triton Inference Server for Linux missing authorization flawSame vendor · NVD/CVE Database
- HighCVE-2026-16497: NVIDIA Triton Inference Server for Linux excessive iteration denial of serviceSame vendor · NVD/CVE Database
- MediumCVE-2026-47630: NVIDIA Triton Inference Server for Linux absolute path traversalSame vendor · NVD/CVE Database