BaseFortify

Publication date: 2026-06-30

Last updated on: 2026-06-30

Assigner: VulnCheck

Description

n8n before 2.8.0 contains an authentication bypass vulnerability allowing authenticated SSO users to disable SSO enforcement through the API. Attackers can create local password credentials to authenticate directly, bypassing organizational SSO policies and identity-provider-enforced multi-factor authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-30

Last Modified

2026-06-30

Generated

2026-07-01

AI Q&A

2026-07-01

EPSS Evaluated

N/A

NVD

CVE-2026-56350

EUVD

EUVD-2026-40443

Affected Vendors & Products

Vendor	Product	Version / Range
n8n	n8n	to 2.8.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability exists in n8n versions before 2.8.0 and involves an authentication bypass. Specifically, authenticated Single Sign-On (SSO) users can exploit the API to disable SSO enforcement. This allows attackers to create local password credentials, enabling them to authenticate directly without using the organization's SSO policies or the multi-factor authentication enforced by the identity provider.

Impact Analysis

The vulnerability can impact you by allowing attackers to bypass your organization's SSO and multi-factor authentication controls. This means unauthorized users could gain direct access to your system using locally created credentials, potentially leading to unauthorized access and increased risk of compromise.

Hi! I’m here to help you understand CVE-2026-56350. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70