---
id: "CVE-2026-118649"
kind: "vulnerability"
aliases: ["CVE-2026-118649"]
title: "n8n: crafted workflow ID lets members access every project's Data Table rows"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "data-tables", "multi-project", "n8n", "self-hosted"]
not_affected_if: ["no-workflow-create-rights", "patched-version", "single-project"]
published_at: "2026-10-28T19:17:33+00:00"
first_seen_at: "2026-10-28T19:34:55+00:00"
updated_at: "2026-10-28T19:35:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118649", "first_seen_at": "2026-10-28T19:34:55+00:00"}]
---

# n8n: crafted workflow ID lets members access every project's Data Table rows

n8n caches each workflow's owner project by a client-supplied workflow ID, and an ID such as __proto__ makes the Data Table project check match every project. An authenticated member who can create and run workflows can list, read, modify and delete Data Table rows in all projects on the instance.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed n8n version with `n8n --version` or the image tag in your deployment.
- Confirm whether your instance has more than one project in use with Data Tables, which is where cross-project reads and writes matter.

## Fix

- Upgrade n8n to `2.43.5` or later on the 2.43 line, or to `2.44.1` or later on the 2.44 line.
- Until upgraded, restrict who can create and run workflows to trusted users.

## Timeline

- 2026-10-28T19:34:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118649

## From the sources

n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each workflow's owner project in memory by that ID, so a crafted ID such as __proto__ makes the Data Table project check match every project. An authenticated member who can create and run workflows can list, read, modify, and delete Data Table rows in all projects of the instance.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_