EUVD-2026-90646
GHSA-r56q-6p4g-65g7
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as low-privilege n8n user
-
DeliveryCraft credential-test request with arbitrary project ID
-
ExploitEndpoint resolves cross-project variables without access check
-
ExecutionSecrets interpolated into test request to attacker-controlled host
-
ImpactCapture exfiltrated sensitive variables
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Object-level authorization, IDOR prevention
|
| Exploitation Conditions | Requires an authenticated n8n account with at least low privileges (PR:L) that can invoke the credential test endpoint. The attacker must supply an arbitrary project ID in the request body for a project containing sensitive scoped variables, and must control the destination host that the credential test connects to so the interpolated secrets are received. Exploitation is limited to deployments on affected versions (<1.123.80, 2.0.0-<2.39.6, 2.40.0-<2.40.1) and is most impactful in multi-project/multi-tenant instances where cross-project secret isolation matters; it is not exploitable by fully unauthenticated attackers. |
| Impact | This is a credible, moderate-priority authorization-bypass (IDOR, CWE-639) in n8n's credential test endpoint. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H) indicates a network-reachable, low-complexity attack requiring only low-privilege authentication, with high confidentiality impact and a limited scope change (SC:L) reflecting that one project's secrets leak to another tenant/project boundary. No EPSS score, CISA KEV listing, or public POC was provided, so there is no public exploit identified at time of analysis and no evidence of active exploitation - meaning the 7.1 score reflects latent potential rather than demonstrated in-the-wild use. The signals are internally consistent: the authenticated, tenant-boundary-crossing nature makes this a realistic insider/multi-tenant threat rather than a mass-exploited internet-facing bug. Note the input Tags label this 'Authentication Bypass,' which is imprecise - CWE-639 and the description describe an authorization (access-control) bypass by an already-authenticated user, not an authentication bypass; this should not be read as a pre-auth flaw. |
| Exploit ScenarioDerived | A low-privileged but authenticated n8n user crafts a request to the credential test endpoint, placing an arbitrary project ID they do not own in the request body. The server resolves that project's scoped variables (which may contain secrets/API keys) without checking the caller's access, interpolates them into the outbound test request, and sends it to a host the attacker controls - exfiltrating the sensitive values. No public exploit code was identified, and the attack requires valid account credentials. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 01, 2026
Authorization bypass in the n8n workflow automation platform lets an authenticated, low-privileged user exfiltrate project-scoped variables by supplying an arbitrary project ID to the credential test endpoint, which resolves those variables without validating that the caller may access the referenced project. The interpolated secrets are then embedded into the outbound credential test request, which the attacker directs at a host they control, turning a legitimate diagnostics feature into a data-exfiltration channel. All deployments on versions before 1.123.80, 2.0.0 through 2.39.5, and 2.40.0 are affected, with cross-project isolation loss being most consequential in multi-project or multi-tenant instances; no public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV.
RemediationAI
Vendor-released patches: upgrade to n8n 1.123.80 or later on the 1.x branch, 2.39.6 or later on the 2.0.0-2.39.x branch, or 2.40.1 or later on the 2.40 branch, as documented in the GitHub advisory GHSA-7gvh-q9w3-wqqx and the VulnCheck advisory. Where immediate upgrading is not possible, the most effective compensating control is to restrict who can reach the credential test endpoint at all - for example, placing n8n behind an authenticating reverse proxy or network policy that blocks the test API path for ordinary users - accepting the trade-off that workflow authors lose the ability to validate credentials interactively. Because successful exploitation requires the server to connect to an attacker-chosen host, egress filtering that limits n8n's outbound traffic to a known allowlist of service endpoints will break the exfiltration step but requires ongoing maintenance of that allowlist and will block legitimate integrations to unlisted services. Reducing the number of low-privileged accounts and auditing stored project-scoped variables for secrets that could be rotated is also recommended, and any variables potentially exposed should be rotated since the disclosure may already have occurred silently. Note that CVSS PR:L means the attacker must hold a valid authenticated account, so the residual risk is concentrated in environments with many users or delegated project access.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
n8n is a low-code workflow automation server, tracked under the CPE cpe:2.3:a:n8n-io:n8n. The defect is an instance of CWE-639, Authorization Bypass Through User-Controlled Key, commonly described as an IDOR: the credential test endpoint accepts a project identifier from the request body and uses it to resolve project-scoped variables before interpolating them into a test request, but performs no access-control check confirming that the authenticated principal belongs to or may read that project. Because the destination of a credential test is also attacker-influenceable, the resolved values - API keys, tokens, and other secrets stored as scoped variables - are transmitted to an attacker-controlled endpoint rather than to a legitimate service. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N) and the independently assessed CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) both describe a network-reachable, low-privilege-triggerable confidentiality-only impact with a scope change, consistent with a tenancy boundary being crossed rather than the integrity or availability of the server being affected. Exploitation requires the attacker to both name a project holding sensitive variables and control the destination host that receives the test request.
Know when N8n gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Authenticated low-priv network attacker (PR:L); scope changes (S:C) because secrets cross the project authorization boundary; high confidentiality, no integrity/availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request body to interpolate sensitive variables into credential test requests sent to attacker-controlled hosts for exfiltration.
Technical POC Analysis
Advisory basis: GHSA-7gvh-q9w3-wqqx (n8n-io/n8n).
Full technical POC analysis - root cause, step-by-step exploitation and patch breakdown - is part of the Pro and Business plans.
Executive ViewAI
The n8n workflow automation platform's project isolation can be bypassed, letting a caller whose access does not extend to the referenced project extract the variables those projects store as secrets - API keys, tokens and database credentials that typically unlock downstream SaaS and internal systems. This matters most to organizations running shared, multi-project or multi-tenant n8n instances, where one team's or client's secrets become readable from another's workspace and the blast radius extends well beyond n8n itself. No public exploit identified at time of analysis, and the vendor has released a patch, so this is an urgent remediation item rather than an active incident.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Remote code execution in n8n's workflow expression evaluation system allows an authenticated user with workflow creation
n8n workflow automation (through 1.121.2) allows authenticated users to execute arbitrary code via the n8n service, with
n8n workflow automation (1.65.0 to 1.121.0) allows unauthenticated file access through form-based workflows. A critical
n8n has a fifth critical RCE vulnerability (CVSS 9.9) in the Expression evaluator, enabling code execution through craft
Authenticated users who can create or modify an n8n workflow can achieve remote code execution on the n8n host by abusin
A prototype pollution vulnerability in the XML and GSuiteAdmin nodes of n8n workflow automation platform allows authenti
An authenticated user with workflow creation or modification privileges in n8n workflow automation platform can exploit
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function w
Authenticated n8n users can hijack administrator accounts when LDAP authentication is enabled by manipulating their LDAP
The n8n package 0.218.0 for Node.js allows Escalation of Privileges. Rated high severity (CVSS 8.8), this vulnerability
SQL injection in n8n's Data Table Get node allows authenticated users with workflow modification permissions to execute
Authenticated users can exploit string formatting and exception handling in n8n's Python task executor to escape sandbox
Exploit-DB