CVE-2026-118649 - n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables
CVE ID :CVE-2026-118649 Published : Oct. 28, 2026, 7:17 p.m. | 1 hour, 7 minutes ago Description :n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each workflow's owner project in memory by that ID, so a crafted ID such as __proto__ makes the Data...