n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
n8n
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-65015
- Affects
- n8n
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- July 22, 2026
- Source last modified
- October 24, 2026
Description
n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and accessing credential secrets without proper authorization verification.
Description quoted from the NVD record.
Who is affected
n8n is a tool for automating tasks by connecting apps and online services into workflows. This flaw affects versions before 2.30.1 and sits in the AI Agents feature, in the part that lets an agent run workflow steps for you. A user with Project Viewer access (meant only to look at a project) can chat with an agent that has these step-running tools turned on. That user can then run any workflow step and reach stored credential secrets (saved passwords and keys), all without proper permission checks. This flaw is rated High.
What to do
- Find out who runs n8n for your organization and which version is installed. Any version before
2.30.1has this flaw. - If someone in your organization installed and runs n8n, that person should update it to
2.30.1or a later release. - If an IT provider or vendor runs n8n for your organization, send them this advisory and ask when the update to
2.30.1will be done. - For details on the fix, read the vendor advisory linked on this page.
Analysis written from the source record as of October 24, 2026 and reviewed before publishing.