{"schema":"threatline.record/2","record":{"id":"GHSA-wvjj-qg37-pv73","aliases":["GHSA-wvjj-qg37-pv73"],"summary":"Crafted Workflow ID Gives Access to Data Tables in Other Projects","details":"## Impact\n\nn8n accepted a client-supplied ID when a workflow was created and cached the owner project of each workflow in memory by its ID. A specially chosen ID made the cache return an invalid owner project, and the Data Table project check built from it then matched every project. A member who can create and run workflows can list, read, change and delete Data Table rows in all projects of the instance.\n\n## Patches\n\nThe issue has been fixed in n8n versions 2.44.1 and 2.43.5. Users should upgrade to one of these versions or later to remediate the vulnerability.\n\n## Workarounds\n\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\n- Restrict n8n instance access to fully trusted users only.\n- Audit existing workflows for any whose stored ID is `__proto__` and remove them.\n- Disable the Data Tables module if it is not required.\n\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","categories":["Frameworks"],"product":"n8n","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-wvjj-qg37-pv73","source_modified_at":"2026-10-14T09:35:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.44.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-wvjj-qg37-pv73","source_modified_at":"2026-10-14T09:35:55Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.43.5"}],"fixed_versions":[],"cvss":7.2,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-14T09:35:55Z","modified_at":"2026-10-14T09:35:55Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-wvjj-qg37-pv73","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-14T09:35:55Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-14T09:35:55Z","content_hash":"b82960c534507a5b41c06c9613289e66b222c2d5e13de2d65aefb89d0a0c0b44"}}