CVE-2026-118649

The n8n workflow automation tool is vulnerable to an authorization bypass in versions before 2.43.5 and 2.44.x before 2.44.1 . The application accepts a client-supplied workflow ID to cache the owner project in memory; providing a crafted ID like __proto__ causes the Data Table project check to m...