CVE-2026-118170
CVE-2026-118170
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document.
| Vendor | strapi |
| Product | strapi open source and enterprise headless cms |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for strapi strapi open source and enterprise headless cms
Be the first to know when new unknown vulnerabilities affecting strapi strapi open source and enterprise headless cms are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Strapi / Strapi Open Source and Enterprise Headless CMS
5.51.0