Privilege escalation in N8n-io N8n
CVE-2026-65595
n8n before 2.30.1 and 2.29.8 assigns all Public API key scopes to JWTs issued through the Token Exchange module regardless of the acting user's role. On instances where the Token Exchange feature and Public API are enabled, a low-privilege…
Vulnerability class: Privilege Escalation
Affected products
- N8n-io N8n — versions 0, 2.30.1, 2.29.8
Weakness classification (CWE)
References
- disclosure@vulncheck.com (vendor-advisory)
- disclosure@vulncheck.com (third-party-advisory)