Which versions of n8n are affected by CVE-2026-65015?

The n8n workflow automation platform contains a high-severity privilege escalation vulnerability in its AI Agents feature that allows low-privileged Project Viewers to execute arbitrary workflows and…. A patch is available.

How to fix or mitigate CVE-2026-65015?

Within 24 hours, inventory all n8n deployments and identify which systems have AI Agents feature enabled with Project Viewer accounts. Within 7 days, implement compensating controls by either disabling the AI Agents feature entirely or restricting Project Viewer role access to node-execution capabilities; audit and revoke Project Viewer credentials that do not require operational necessity. Within 30 days, enable comprehensive audit logging of workflow execution and credential access attempts, monitor n8n security advisories for patch availability, and evaluate alternative workflow automation platforms if vendor patches remain unavailable.

n8n CVE-2026-65015

Q: What is the CVSS score of CVE-2026-65015?

CVE-2026-65015 has a CVSS 4.0 base score of 7.2 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-47631 HIGH

Incorrect Authorization (CWE-863)

2026-07-22 VulnCheck

GHSA-w46p-w7w2-fr9g

GHSA-x5vx-c2c8-m3w9

Privilege Escalation Authentication Bypass N8n

7.2

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.2 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.1 HIGH

Authenticated Project Viewer (PR:L) over the network; AC:H because a node-tool-enabled agent must already exist; scope change (S:C) as it reaches credentials/systems beyond the user's authorization, high confidentiality, limited integrity.

3.1 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:L

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 22, 2026 - 13:02 EUVD

Analysis Generated

Jul 22, 2026 - 12:25 vuln.today

CVE Published

Jul 22, 2026 - 11:21 cve.org

HIGH 7.2

DescriptionCVE.org

n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and accessing credential secrets without proper authorization verification.

AnalysisAI

Privilege escalation in n8n workflow automation platform before 2.30.1 allows a low-privileged Project Viewer to abuse the AI Agents feature, where the node-execution (run-node) tool omits authorization checks. By chatting with an agent that has node tools enabled, the viewer can execute arbitrary nodes and read credential secrets they should not access. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not listed in CISA KEV.

Technical ContextAI

n8n is a source-available workflow automation platform in which users operate within projects under role-based access control (e.g. Project Viewer, which is intended to be read-only). The vulnerability lives in the AI Agents feature: when an agent is configured with node tools, the underlying node-execution tool (run-node) can be invoked through natural-language chat. Per CWE-863 (Incorrect Authorization), the code path that executes these node tools performs the action without verifying that the requesting user's role actually permits node execution or credential access, so the authorization decision is either missing or evaluated against the wrong principal. Because node execution in n8n resolves and injects stored credential secrets at runtime, bypassing that check exposes secrets belonging to the project or connected systems. The affected CPE is cpe:2.3:a:n8n-io:n8n across all versions prior to the 2.30.1 fix.

RemediationAI

Upgrade to n8n 2.30.1 or later, which is the vendor-released patch that adds the missing authorization checks on the node-execution tool (see GHSA-x5vx-c2c8-m3w9). If you cannot upgrade immediately, reduce exposure by disabling or removing node tools from AI Agent configurations so that agents cannot invoke the run-node tool - this neuters the attack path but also removes legitimate agent-driven node execution. Additionally, audit and tighten project membership so that untrusted or read-only users are not placed in projects that contain credential-bearing workflows and node-enabled agents, and review which credentials are scoped to shared projects, since the trade-off of over-broad project membership is exactly the secret exposure this flaw exploits. Consult the vendor advisory (https://github.com/n8n-io/n8n/security/advisories/GHSA-x5vx-c2c8-m3w9) and VulnCheck writeup (https://www.vulncheck.com/advisories/n8n-before-privilege-escalation-via-run-node-tool) before rolling out mitigations.