Node-RED Admin API /flows Endpoint Permission Check Missing When adminAuth Disabled
Node-RED Admin API /flows Endpoint Permission Check When the adminAuth setting is disabled, the /flows endpoint does not perform an explicit permission verification, allowing unauthenticated requests to read or modify flows. Deployments triggered through this endpoint may fail silently, and the log only shows a generic “Error: Failed to deploy flow” message