n8n before version 2.28.0 contains an improper authorization vulnerability that allows authenticated users to assign workflows to folders in projects they do not own. This issue enables bypassing project and folder authorization boundaries by submitting crafted request payloads during workflow creation, leading to logical integrity violations in project folder structures. The advisory is a duplicate and has been withdrawn in favor of GHSA-2xgm-wc4g-5jvg. No patch links are provided in this data.