Improper Authentication in n8n - #VU139112
Published: July 22, 2026
Vulnerability identifier: #VU139112
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: N/A
CWE-ID: CWE-287
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: n8n
Affected software:
n8n
n8n
Detailed vulnerability description
The vulnerability allows a remote user to take over arbitrary user accounts.
The vulnerability exists due to improper authentication in the token exchange embed login feature when matching a validly signed incoming token to a local account by its email claim. A remote user can supply a token accepted by a configured trusted key source with an unverified email claim to take over arbitrary user accounts.
Only instances with the embed login feature enabled and at least one trusted key source configured are vulnerable.
Remediation
Install security update from vendor's website.