CVE-2026-65015Disclosure(n8n / n8n)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and accessing credential secrets without proper authorization verification.

n8n CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

Threat summary

4 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 3d ago at 1 mentions (2026-07-22); latest day: 1
4 total mentions across 4 days

Affected systems

Vendors

n8n

Products

n8n

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 4d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-22	1	Disclosure1
2026-07-27	1	General1
2026-09-14	1	Disclosure1
2026-09-15	1	Disclosure1

Full discourse4 posts

HOL@HashgraphOnline91d
Disclosure
n8n privilege escalation (CVE-2026-65015). A read-only Project Viewer can drive an agent to run arbitrary nodes and pull stored credentials. run_node_tool checked only agent:execute scope, not whether the user could run nodes or access those creds. https://hol.org/guard/security/workspace-trust
Post summary
The passage details a privilege escalation flaw in n8n (CVE‑2026‑65015) allowing read‑only Project Viewers to trigger arbitrary node execution and retrieve stored credentials. No patches, PoC code, or exploitation evidence are referenced.
20060748
19.0K followersView on X
Mr.Niko@_MrNiko37d
Disclosure
CVE-2026-65015 Viewer has agent:execute. no workflow:execute. ask the agent to run_node_tool with HTTP Request + a project credential. secret walks out to your Collaborator. Execute Command enabled on self-host: reverse shell on the box.
Post summary
The text discloses CVE-2026-65015 with technical details describing how a Viewer with agent:execute can exfiltrate secrets and achieve remote command execution/reverse shell on self-hosted instances, but provides no PoC, exploit tool, patch, or evidence of active exploitation.
10000173
1.3K followersView on X
Antonio De Turris@antoniodeturris38d
Disclosure
AI + existing application logic = some interesting security problems 👀 I found two vulnerabilities in n8n’s AI Agents (CVE-2026-65015 & CVE-2026-59207), both now fixed. Full story 👇 https://deturris.io/posts/n8n-ai-agents-authorization-bypasses/
Post summary
The tweet announces two fixed authorization‑bypass vulnerabilities in n8n’s AI Agents (CVE‑2026‑65015 and CVE‑2026‑59207) and links to a detailed story, with no PoC, exploit, or active exploitation details.
0000068
12 followersView on X
MalwareObserver@MalwareObserver86d
General
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-65015](https://github.com/n8n-io/n8n/security/advisories/GHSA-x5vx-c2c8-m3w9) n8n versi... https://github.com/n8n-io/n8n/security/advisories/GHSA-x5vx-c2c8-m3w9 #ZeroDay #PatchManagement #Vulnerability
Post summary
The tweet alerts to CVE-2026-65015 with a link to a GitHub advisory but offers no additional details on the vulnerability, PoC, exploit, or patch.
0000042
16 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	n8n	n8n	-	node.js	-
App	n8n	n8n	-	node.js	-
App	n8n	n8n	2.30.0	node.js	-
App	n8n	n8n	2.30.0	node.js	-

Explore more

Back to dashboard n8n CVEs n8n vulnerabilities

What researchers are saying

CVE-2026-65015

Mr.Niko[verified]@_MrNikoDisclosure

The text discloses CVE-2026-65015 with technical details describing how a Viewer with agent:execute can exfiltrate secrets and achieve remote command execution/reverse shell on self-hosted instances, but provides no PoC, exploit tool, patch, or evidence of active exploitation.

MalwareObserver[verified]@MalwareObserverGeneral

The tweet alerts to CVE-2026-65015 with a link to a GitHub advisory but offers no additional details on the vulnerability, PoC, exploit, or patch.

HOL@HashgraphOnlineDisclosure

The passage details a privilege escalation flaw in n8n (CVE‑2026‑65015) allowing read‑only Project Viewers to trigger arbitrary node execution and retrieve stored credentials. No patches, PoC code, or exploitation evidence are referenced.

Antonio De Turris@antoniodeturrisDisclosure

The tweet announces two fixed authorization‑bypass vulnerabilities in n8n’s AI Agents (CVE‑2026‑65015 and CVE‑2026‑59207) and links to a detailed story, with no PoC, exploit, or active exploitation details.