Privilege Escalation

n8n is vulnerable to Privilege Escalation. The vulnerability is due to missing authorization checks in the AI Agents node-execution tool, which allows a Project Viewer user to execute arbitrary nodes and access credential secrets by interacting with an agent that has node tools enabled...