CVE-2026-110851

The software n8n (versions before 2.41.4 and 2.42.x before 2.42.1) contains an authorization bypass in the Agents create endpoint . The vulnerability stems from the endpoint accepting a caller-supplied Agent ID and verifying permissions only against the requested project, failing to verify which ...