PT-2026-129147
CVE-2026-118649
·
Published
2026-10-28
·
Updated
2026-10-28
Description by
CVSS 3.1
8.3
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each workflow's owner project in memory by that ID, so a crafted ID such as proto makes the Data Table project check match every project. An authenticated member who can create and run workflows can list, read, modify, and delete Data Table rows in all projects of the instance.
Found an issue in the description? Have something to add? Feel free to write us 👾