CVE-2026-110853

Deferred Deferred - Pending Action

Authorization Bypass in n8n Workflow Identity Spoofing

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: VulnCheck

Description

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to and modify another workflow's static data and error-workflow dispatch.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110853

EUVD

EUVD-2026-101736

Affected Vendors & Products

Vendor	Product	Version / Range
n8n-io	n8n	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

n8n before version 1.123.83 has an authorization bypass flaw. Authenticated users can spoof workflow identity by setting a trusted identifier in Execute Sub-workflow inline JSON mode. This lets attackers access credentials from projects they are not part of and modify another workflow's static data or error-workflow dispatch.

Detection Guidance

To detect this vulnerability, check if your n8n instance is running a version before 1.123.83. Verify workflow configurations for Execute Sub-workflow inline JSON mode and inspect if trusted identifiers are being improperly set. Monitor for unauthorized credential access or workflow modifications.

Impact Analysis

If exploited, attackers with access could steal sensitive data by resolving unauthorized credentials, alter workflow behavior, or disrupt operations by modifying static data or error workflows. This could lead to data breaches or service disruptions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements. Organizations may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Upgrade n8n to version 1.123.83 or later to address the authorization bypass vulnerability.

Hi! I’m here to help you understand CVE-2026-110853. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70