CVE-2026-65015

n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and accessing credential secrets without proper authorization verification.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/n8n-io/n8n/security/advisories/GHSA-x5vx-c2c8-m3w9	Mitigation Vendor Advisory
https://www.vulncheck.com/advisories/n8n-before-privilege-escalation-via-run-node-tool	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:n8n:n8n:::::community:node.js::
	cpe:2.3:a:n8n:n8n:::::enterprise:node.js::
	cpe:2.3:a:n8n:n8n:2.30.0::::community:node.js::*
	cpe:2.3:a:n8n:n8n:2.30.0::::enterprise:node.js::*

History

24 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Versiones de n8n anteriores a la 2.30.1 contienen una vulnerabilidad de escalada de privilegios en la función de Agentes de IA donde la herramienta de ejecución de nodos carece de comprobaciones de autorización adecuadas. Un usuario con rol de Visor de Proyecto puede escalar privilegios al chatear con un agente que tiene las herramientas de nodo habilitadas, ejecutando nodos arbitrarios y accediendo a secretos de credenciales sin la verificación de autorización adecuada.

Information

Published : 2026-07-22 12:18

Updated : 2026-10-29 19:17

NVD link : CVE-2026-65015

Mitre link : CVE-2026-65015

CVE.ORG link : CVE-2026-65015

JSON object : View

Products Affected

n8n

n8n

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2026-65015", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-65015", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-22T18:20:14.424938Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "n8n-io", "product": "n8n", "versions": [{"status": "affected", "version": "2.30.0", "lessThan": "2.30.1", "versionType": "semver"}, {"status": "unaffected", "version": "2.30.1", "versionType": "semver"}], "packageURL": "pkg:npm/n8n", "defaultStatus": "unaffected"}, {"vendor": "n8n-io", "product": "n8n", "versions": [{"status": "affected", "version": "0", "lessThan": "2.29.8", "versionType": "semver"}, {"status": "unaffected", "version": "2.29.8", "versionType": "semver"}], "packageURL": "pkg:npm/n8n", "defaultStatus": "unaffected"}]}], "published": "2026-07-22T12:18:18.587", "references": [{"url": "https://github.com/n8n-io/n8n/security/advisories/GHSA-x5vx-c2c8-m3w9", "tags": ["Mitigation", "Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/n8n-before-privilege-escalation-via-run-node-tool", "tags": ["Third Party Advisory", "VDB Entry"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and accessing credential secrets without proper authorization verification."}, {"lang": "es", "value": "Versiones de n8n anteriores a la 2.30.1 contienen una vulnerabilidad de escalada de privilegios en la funci\u00f3n de Agentes de IA donde la herramienta de ejecuci\u00f3n de nodos carece de comprobaciones de autorizaci\u00f3n adecuadas. Un usuario con rol de Visor de Proyecto puede escalar privilegios al chatear con un agente que tiene las herramientas de nodo habilitadas, ejecutando nodos arbitrarios y accediendo a secretos de credenciales sin la verificaci\u00f3n de autorizaci\u00f3n adecuada."}], "lastModified": "2026-10-29T19:17:25.600", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:n8n:n8n:*:*:*:*:community:node.js:*:*", "vulnerable": true, "matchCriteriaId": "FAD58B22-8643-4BEA-B0CA-21AD13FA02F2", "versionEndExcluding": "2.29.8"}, {"criteria": "cpe:2.3:a:n8n:n8n:*:*:*:*:enterprise:node.js:*:*", "vulnerable": true, "matchCriteriaId": "9138B0FD-A50E-4E58-AA0D-A0595EA9B685", "versionEndExcluding": "2.29.8"}, {"criteria": "cpe:2.3:a:n8n:n8n:2.30.0:*:*:*:community:node.js:*:*", "vulnerable": true, "matchCriteriaId": "E125F7EF-F72F-427F-82DE-D6A505B1DF8F"}, {"criteria": "cpe:2.3:a:n8n:n8n:2.30.0:*:*:*:enterprise:node.js:*:*", "vulnerable": true, "matchCriteriaId": "3C2780A0-55EC-488D-9149-EE83BA246A38"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}