CVE-2026-59253

5.0 Moyenne

Publiée le 08/07/2026 à 16:17 · Modifiée le 08/07/2026 à 21:25 · Analysée par le NVD · Source : disclosure@vulncheck.com

Description

n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and folder authorization boundaries by supplying crafted request payloads during workflow creation, causing logical integrity violations in target project folder structures.

Traduire en français

Produits concernés

n8n
N8n n8n

Scores CVSS

Version	Score	Source	Vecteur
4.0	5.3 Moyenne	disclosure@vulncheck.com	`CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
3.1	5.0 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-639

Références

https://github.com/n8n-io/n8n/security/advisories/GHSA-2xgm-wc4g-5jvg MitigationVendor Advisory
https://www.vulncheck.com/advisories/n8n-improper-authorization-in-workflow-assignment-to-folders Third Party Advisory

CVE-2026-59253

Description

Produits concernés

Scores CVSS

Faiblesses (CWE)

Références

Ailleurs