CVE-2026-103251: Missing Authorization in n8n-io n8n
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum verification, and npm safety checks to install arbitrary npm packages across all cluster instances without authentication.
AI Analysis
Technical Summary
CVE-2026-103251 is a high-severity vulnerability in n8n affecting specific version ranges. The vulnerability is a validation bypass in the community package installation handler used in queue mode deployments. Attackers who have write access to Redis can circumvent name validation, permission checks, checksum verification, and npm safety checks. This enables them to install arbitrary npm packages on all cluster instances without requiring authentication, potentially leading to unauthorized code execution or system compromise.
Potential Impact
An attacker with Redis write access can install arbitrary npm packages across all cluster instances without authentication. This could lead to unauthorized code execution, compromise of the n8n environment, and potential lateral movement within affected deployments.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
CVE-2026-103251: Missing Authorization in n8n-io n8n
Description
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum verification, and npm safety checks to install arbitrary npm packages across all cluster instances without authentication.
CVSS v4.0
Score 7.5high
Affected software
n8n-io
n8n
pkg:npm/n8n-io/n8nRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-103251 is a high-severity vulnerability in n8n affecting specific version ranges. The vulnerability is a validation bypass in the community package installation handler used in queue mode deployments. Attackers who have write access to Redis can circumvent name validation, permission checks, checksum verification, and npm safety checks. This enables them to install arbitrary npm packages on all cluster instances without requiring authentication, potentially leading to unauthorized code execution or system compromise.
Potential Impact
An attacker with Redis write access can install arbitrary npm packages across all cluster instances without authentication. This could lead to unauthorized code execution, compromise of the n8n environment, and potential lateral movement within affected deployments.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-30T10:52:32.249Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6abe7492a43b0b3b89bd1ce1
Added to database: 10/01/2026, 14:56:18 UTC
Last enriched: 10/01/2026, 15:22:08 UTC
Last updated: 10/01/2026, 19:41:31 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.