CVEvulnerability

CVE-2026-118170

Published 2026-10-27 Modified 2026-10-28 Official page ↗
Status
Deferred
Published
2026-10-27
Last modified
2026-10-28
Assigner
[email protected]

Description

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document.

References