CVE-2026-110853GHSA-866p-xg8v-g2q7
n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON
n8n-io n8nFrameworks
CVSS
7.1HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.23%Chance of exploitation activity in the next 30 days, higher than 12% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 1.123.83n8nCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to and modify another workflow's static data and error-workflow dispatch.
Text from CVE List
Affected versions 1
- n8naffected: all versions before 1.123.83CVE List