CVE-2026-56776

creationtimestamp| type| source ---|---|--- 2026-07-08 16:09:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5iyjp3my2w...

CVE-2026-56776

CVE-2026-56776 affects n8n versions prior to 1.123.55, 2.25.7, and 2.26.2. The issue is an authorization bypass in POST /workflows/{workflowId}/test-runs/new where access is granted using workflow:read instead of workflow:execute, enabling an authenticated user with read-only access to trigger a ...