Is there a public PoC exploit available for EUVD-2026-74267?

Yes, a public proof-of-concept exploit is available for EUVD-2026-74267. Prioritise patching immediately. EPSS: 0.2%.

Is there a patch available for EUVD-2026-74267?

Yes, a patch is available for EUVD-2026-74267. Update the affected software to the latest version immediately.

n8n EUVD-2026-74267

Q: What is the CVSS score of EUVD-2026-74267?

EUVD-2026-74267 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

| CVE-2026-86996 MEDIUM

Missing Authorization (CWE-862)

2026-09-08 https://github.com/n8n-io/n8n

GHSA-7hgx-277f-7vmg

5.3

CVSS 4.0 · Vendor: https://github.com/n8n-io/n8n

Severity by source

Vendor (https://github.com/n8n-io/n8n) PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.4 MEDIUM

Authenticated low-privileged user exploits over network; scope change because attacker crosses workflow-owner trust boundary; no availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Primary rating from Vendor (https://github.com/n8n-io/n8n).

CVSS VectorVendor: https://github.com/n8n-io/n8n

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Metadata Corrected

Sep 09, 2026 - 03:40 vuln.today

tag: Authentication Bypass removed

Source Code Evidence Fetched

Sep 09, 2026 - 02:59 vuln.today

Analysis Generated

Sep 09, 2026 - 02:59 vuln.today

Patch available

Sep 08, 2026 - 22:04 EUVD

CVE Published

Sep 08, 2026 - 21:33 cve.org

MEDIUM 5.3

DescriptionCVE.org

Impact

A workflow's "_This workflow can be called by_" setting was enforced by the Execute Workflow node but was not consulted when the same workflow was attached to an Agent as a tool. A user who could build an Agent could therefore call a workflow that its owner had restricted, and read back what it returned. The patch applies the sub-workflow caller policy on the Agent tool path.

Patches

The issue has been fixed in n8n versions 2.37.7 and 2.38.2. Users should upgrade to one of these versions or later to remediate the vulnerability.

Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:

Restrict n8n instance access to fully trusted users only.
Audit workflows attached as Agent tools and review their caller policy settings.
Remove sensitive workflows from Agent tool configurations until the instance is patched.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

AnalysisAI

Sub-workflow caller policy bypass in n8n allows authenticated low-privileged users to invoke restricted workflows via the Agent tool path, reading back outputs they should not have access to. All n8n versions before 2.37.7 and the 2.38.x branch before 2.38.2 are affected. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated account on the n8n instance with sufficient permissions to create Agent workflows and attach existing workflows as tools. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) scores 5.3 and correctly captures that exploitation requires a valid low-privileged account - this is an internal authorization bypass, not an unauthenticated remote attack. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patches are available at n8n 2.37.7 and n8n 2.38.2; operators should upgrade to one of these versions or any later release. … Detailed patch versions, workarounds, and compensating controls in full report.