CVE-2026-85173: Authorization Bypass Through User-Controlled Key in n8n-io n8n
Description
n8n versions prior to 2.36.2 have an authorization bypass vulnerability in the Insights API routes. Authenticated users with insights scopes can exploit this flaw by supplying arbitrary projectId parameters to access workflow names and execution statistics from projects they are not members of. This issue allows unauthorized access to sensitive project and workflow information across projects.
CVSS v4.0
Score 5.3medium
Affected software
n8n-io
n8n
n8n-io
n8n
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85173 is an authorization bypass vulnerability affecting n8n versions before 2.36.2. The flaw exists in the Insights API routes where per-project authorization checks are missing. Authenticated users with insights scopes can manipulate the projectId parameter to retrieve workflow names and execution statistics from projects they do not belong to, exposing sensitive project and workflow data.
Potential Impact
The vulnerability enables unauthorized disclosure of sensitive project and workflow information, including workflow names and execution statistics, across projects. This could lead to information leakage within an organization but does not allow privilege escalation or code execution based on the provided data.
Mitigation Recommendations
Upgrade n8n to version 2.36.2 or later where this authorization bypass vulnerability has been fixed. No other mitigation or temporary workaround is indicated. Patch status is confirmed by the affectedVersions field indicating versions before 2.36.2 are vulnerable.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-03T11:05:09.078Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a995c0aacd9273b49dbb6e0
Added to database: 09/03/2026, 11:37:46 UTC
Last enriched: 09/17/2026, 02:45:42 UTC
Last updated: 10/17/2026, 18:48:23 UTC
Views: 79
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.