Incorrect Authorization

Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to Incorrect Authorization in the evaluation test runs controller, where three state-changing endpoints authorize actions against the workflow:read permission instead of the action-appropriate...

n8n authorization issue vulnerability

Versions prior to n8n 1.123.55, 2.25.7, and 2.26.2 contain an authorization issue vulnerability. This vulnerability arises because, in three endpoint configurations that change state during evaluation tests, the authorization scope is set to workflow:read instead of workflow:execute. As a result,...