Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-118170

CVE-2026-118170

Description

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Strapi Strapi Open Source and Enterprise Headless CMS

  • 5.51.0affected

References