CVE-2026-75517

Prior to version 3.18.0 , Novu is vulnerable to a cross-environment integration manipulation (IDOR) because mutation use cases—such as remove-integration , update-integration , auto-configure-integration , and set-integration-as-primary —fail to consistently enforce environmentId . An attacker wi...