CVE-2026-44798 | Nautobot up to 2.4.32/3.1.1 REST API current_head modification of assumed-immutable data

A vulnerability classified as problematic has been found in Nautobot up to 2.4.32/3.1.1. This affects an unknown part of the component REST API. This manipulation of the argument current_head causes modification of assumed-immutable data.

This vulnerability is handled as CVE-2026-44798. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.