Security Advisory

CVE-2026-65015

8.8
HIGH

Vulnerability Description

n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and accessing credential secrets without proper authorization verification.
Published Date July 22, 2026
Official Source NIST NVD Advisory