Lucene search
+L

8 matches found

EUVD
EUVD
•added 2026/10/15 12:31 a.m.•20 views

EUVD-2026-101736

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/14 10:52 p.m.•10 views

CVE-2026-110853 n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/14 10:52 p.m.•32 views

CVE-2026-110853 n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...

7.1CVSS6AI score
SaveExploits0References4
Mend
Mend
•added 2026/10/14 10:52 p.m.•14 views

CVE-2026-110853

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...

8.5CVSS5.9AI score0.00228EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/14 10:52 p.m.•43 views

CVE-2026-110853 n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...

7.1CVSS0.00228EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/14 10:52 p.m.•35 views

CVE-2026-110853

The n8n automation platform, in versions prior to 1.123.83 , is susceptible to an authorization bypass vulnerability (CWE-639). Authenticated members can spoof workflow identities by providing a trusted identifier when using Execute Sub-workflow in inline JSON mode. This flaw allows attackers to ...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•22 views

PT-2026-114167

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...

7.1CVSS6AI score0.00228EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•11 views

CVE-2026-110853: Authorization Bypass Through User-Controlled Key

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...

7.1CVSS6AI score0.00228EPSS
SaveExploits0References2
Rows per page
Query Builder