Authorization bypass through user-controlled key in n8n - CVE-2026-110851
Published: November 9, 2026 / Updated: November 10, 2026
Vulnerability identifier: #VU163087
CSH Severity: Low
CVSS v4: 7.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-110851
CWE-ID: CWE-639
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an authenticated attacker to take ownership of another project's Agent and modify its configuration.
The vulnerability exists due to missing ownership validation in n8n's Agents create endpoint when a caller supplies an existing Agent identifier. An authenticated attacker with read-only access to the source project and permission to create Agents in their own project can submit that identifier to transfer the Agent and overwrite its configuration.
Affected software
n8n
How to mitigate CVE-2026-110851
Install security update from vendor's website.
n8n - addressed in versions 2.41.4, 2.42.1