PT-2026-56447

CVE-2026-59253

Published

2026-07-08

Updated

2026-07-22

Description by

CVSS 4.0

5.3

Medium

MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.28.0

Description An improper authorization issue allows authenticated users to assign workflows to folders belonging to other projects. By supplying crafted request payloads during the workflow creation process, attackers can bypass project and folder authorization boundaries, leading to logical integrity violations within the target project folder structures.

Recommendations Update to version 2.28.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Ho-9

Vendors

Affected products

Weakness enumeration

CWE-639: Authorization Bypass Through User-Controlled Key

Related identifiers