PT-2026-63345 · N8N · N8N
CVSS v4.0
7.2
High
| Vector | AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
n8n versions prior to 2.30.1
Description
A privilege escalation issue exists in the AI Agents feature where the node-execution tool lacks proper authorization checks. A user with the Project Viewer role can escalate privileges by interacting with an agent that has node tools enabled. The tool was authorized only by the
agent:execute scope and executed nodes using project credentials without verifying if the requesting user had permission to execute those nodes or access the credentials. This allows a Project Viewer to execute arbitrary tool nodes and access unauthorized credential secrets. If command- or file-capable tool nodes, such as Execute Command or SSH, are enabled, this can lead to arbitrary command execution on the host server.Recommendations
Update to version 2.29.8 or 2.30.1.
Disable the AI Agents module by removing
agents from the N8N ENABLED MODULES environment variable.
Restrict project membership to fully trusted users and avoid granting Project Viewer access to untrusted users on projects with agents that have node tools enabled.
Disable command-execution nodes, such as Execute Command or SSH, to limit potential impact.Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
N8N