CVE-2026-33720

creationtimestamp| type| source ---|---|--- 2026-03-25 21:44:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhw2qtecjk25 2026-03-26 03:00:16+00:00| seen| https://github.com/n8n-io/n8n/security/advisories/GHSA-58qr-rcgv-642v...

CVE-2026-33720

n8n is an open source workflow automation platform. Prior to version 2.8.0, when the N8NSKIPAUTHONOAUTHCALLBACK environment variable is set to true, the OAuth callback handler skips ownership verification of the OAuth state parameter. This allows an attacker to trick a victim into completing an...