[CRITICAL] Winter vulnerable to privilege escalation by authenticated backend users

PKSA-4n8n-yrbw-13gr CVE-2026-27591 GHSA-pgpf-m8m4-6cg6

Affected version: <1.0.477|>=1.1.0,<1.1.12|>=1.2.0,<1.2.12

Reported by:
GitHub