CVE-2026-30824 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/api/v1/nvidia-nim/*) i…
High CVSS: 7.7

CVE-2026-30824

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. This issue has been patched in version 3.0.13.
Vendor
Flowiseai
Product
Flowise
CWE
CWE-306
Yayın Tarihi
2026-03-07 06:16:10
Güncelleme
2026-03-11 13:35:41
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-306 Flowise HIGH Flowiseai 2026

Referanslar

https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.13 https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5f53-522j-j454