Trap-Bytes

**Name of the Vulnerable Software and Affected Versions** n8n versions prior to 2.30.1 **Description** A privilege escalation issue exists in the AI Agents feature where the node-execution tool lacks proper authorization checks. A user with the Project Viewer role can escalate privileges by interacting with an agent that has node tools enabled. The tool was authorized only by the `agent:execute` scope and executed nodes using project credentials without verifying if the requesting user had permission to execute those nodes or access the credentials. This allows a Project Viewer to execute arbitrary tool nodes and access unauthorized credential secrets. If command- or file-capable tool nodes, such as Execute Command or SSH, are enabled, this can lead to arbitrary command execution on the host server. **Recommendations** Update to version 2.29.8 or 2.30.1. Disable the AI Agents module by removing `agents` from the `N8N ENABLED MODULES` environment variable. Restrict project membership to fully trusted users and avoid granting Project Viewer access to untrusted users on projects with agents that have node tools enabled. Disable command-execution nodes, such as Execute Command or SSH, to limit potential impact.