n8n's GSuite node turns a `__proto__` schema name into full RCE (CVE-2026-33696)
A user-supplied schema name in n8n's GSuiteAdmin node lands as a bare object key, so `__proto__` pollutes Object.prototype. Chained through the Git node's GIT_SSH_COMMAND, one webhook request yields a shell. Any editor-accessible n8n instance is exposed.