CVE-2026-110851: Authorization Bypass Through User-Controlled Key in n8n-io n8n
Description
n8n versions before 2.41.4 and 2.42.x before 2.42.1 have an authorization bypass vulnerability in the Agents create endpoint. This flaw allows an authenticated user with read-only access to Agents in one project to supply an existing Agent ID and move that Agent into their own project, modifying its name, schema, and version without proper ownership verification.
CVSS v4.0
Score 6.1medium
Affected software
n8n-io
n8n
pkg:github/n8n-io/n8nRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-110851 is an authorization bypass vulnerability in n8n's Agents create endpoint affecting versions prior to 2.41.4 and 2.42.0 up to but excluding 2.42.1. The endpoint accepts a user-supplied Agent ID and only checks permissions against the requested project, failing to verify the actual project ownership of the Agent. This allows an authenticated user with read-only Agent access in another project to reassign an existing Agent to their project and modify its attributes.
Potential Impact
An authenticated user with limited read-only access to Agents in one project can escalate privileges by moving an Agent from another project into their own and rewriting its details. This could lead to unauthorized modification of Agent configurations, potentially impacting workflows or data integrity within n8n environments.
Mitigation Recommendations
Upgrade n8n to version 2.41.4 or later, or to 2.42.1 or later, where this authorization bypass vulnerability has been fixed. No other mitigation steps are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-14T22:16:22.734Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad00a642cdf04f656ba02f1
Added to database: 10/14/2026, 23:04:04 UTC
Last enriched: 10/14/2026, 23:19:13 UTC
Last updated: 10/14/2026, 23:28:13 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.