CVE-2026-86073 n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an authorization code's first access token to the consented resource but did not bind its refresh token. Refreshing checked only that the requested resource was registered, not that it...

CVE-2026-86073

n8n , an open-source workflow automation platform, contains an OAuth consent bypass in its token endpoint. Prior to 2.37.7 and 2.38.1 , the endpoint bound an authorization code's first access token to the consented resource but did not bind its refresh token . On refresh, the system checked only ...