CVE-2026-110851

Deferred Deferred - Pending Action

Authorization Bypass in n8n Agents Endpoint

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: VulnCheck

Description

n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it. An authenticated user with read-only Agent access to another project can supply an existing Agent ID to move that Agent into their own project and rewrite its name, schema and version.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110851

EUVD

EUVD-2026-101734

Affected Vendors & Products

Vendor	Product	Version / Range
n8n-io	n8n	0
n8n-io	n8n	2.42.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

n8n versions before 2.41.4 and 2.42.x before 2.42.1 have an authorization bypass in the Agents create endpoint. An authenticated user with read-only Agent access to a project can supply an existing Agent ID to move that Agent into their own project and rewrite its name, schema and version without proper ownership verification.

Detection Guidance

To detect this vulnerability, check for unauthorized changes to Agents in n8n by reviewing project permissions and Agent ownership. Look for Agents moved between projects without proper authorization. Review logs for requests to the Agents create endpoint with unexpected Agent IDs.

Impact Analysis

This vulnerability allows an attacker with limited access to manipulate Agents in n8n, potentially leading to unauthorized project access, data tampering, or workflow disruption. It could enable privilege escalation within the n8n environment.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, violating GDPR's data integrity and confidentiality requirements or HIPAA's access controls. Compliance may be compromised if attackers gain access to regulated data.

Mitigation Strategies

Upgrade n8n to version 2.41.4 or later if using the 2.41.x branch, or to version 2.42.1 or later if using the 2.42.x branch to address the authorization bypass in the Agents create endpoint.

Hi! I’m here to help you understand CVE-2026-110851. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70