CVE-2026-59253

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

5.0 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N                                    

Vulnerability Description

n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and folder authorization boundaries by supplying crafted request payloads during workflow creation, causing logical integrity violations in target project folder structures.

Vulnerability Details

Published Date

July 08, 2026

Last Modified

July 08, 2026

CWE ID

CWE-639

Source

NVD

Vendor

n8n

Product

n8n

External References

https://github.com/n8n-io/n8n/security/advisories/GHSA-2xgm-wc4g-5jvg
https://www.vulncheck.com/advisories/n8n-improper-authorization-in-workflow-assignment-to-folders

CVE-2026-59253

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment