Threats tagged 'ghsa-cr47-hhfm-v884'

CVE-2026-92588 is an authorization bypass vulnerability in the n8n workflow automation platform affecting versions prior to 1.123.76, 2.37.7, and 2.38.2. The flaw allows authenticated project-scoped users to push deletions of workflows and credentials from projects they do not have access to by manipulating file paths and statuses in the source control push endpoint. Exploitation requires the Source Control (Environments) enterprise feature to be licensed, enabled, and connected to a remote repository. The issue has been fixed in the specified versions.