n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy

Impact A workflow's "This workflow can be called by" setting was enforced by the Execute Workflow node but was not consulted when the same workflow was attached to an Agent as a tool. A user who could build an Agent could therefore call a workflow that its owner had restricted, and read back what...

CVE-2026-86996

n8n (open-source workflow automation platform) is affected by a policy bypass in its Agent workflow tool . Prior to 2.37.7 and 2.38.2 , the "This workflow can be called by" setting was enforced by the Execute Workflow node but not when a workflow was attached to an Agent as a tool. The root cause...