Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation vulnerability in Enterprise SSO instance-role provisioning. The provisioning path maps an IdP-asserted role claim to an n8n global role but does not prevent assignment of the global:owner role (unlike the token-exchange identity path, which rejects it). An SSO-authenticated user whose instance-role claim resolves to global:owner is provisioned as instance owner, gaining full administrative control over workflows, credentials, users, and instance configuration. Exploitation requires that Enterprise SSO is configured, instance-role provisioning is enabled via N8N_SSO_SCOPES_PROVISION_INSTANCE_ROLE (disabled by default), and the attacker controls the instance-role claim value issued by the IdP.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-07-27 | 1 | Disclosure1 |
| 2026-08-01 | 1 | Patch1 |
| 2026-08-03 | 1 | Patch1 |
| 2026-08-04 | 1 | Patch1 |
CVE-2026-65016 n8n 1.123.64以前、2.29.8以前、2.30.1以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/30/cve-2026-65016-n8n-11236422982301/ #IT #Security #cybersecurity
Post summary
The article explains CVE‑2026‑65016 affecting n8n, providing technical details and a concise mitigation guide.
CVE-2026-65016 n8n 1.123.64以前、2.29.8以前、2.30.1以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/30/cve-2026-65016-n8n-11236422982301/ #IT #Security #cybersecurity
Post summary
The post references CVE‑2026‑65016 affecting older n8n releases and points to a URL that presumably explains the flaw and offers mitigation steps.
CVE-2026-65016 n8n 1.123.64以前、2.29.8以前、2.30.1以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/30/cve-2026-65016-n8n-11236422982301/ #IT #Security #cybersecurity
Post summary
The article explains CVE-2026-65016, identifies vulnerable n8n versions, and provides mitigation steps, but does not mention exploitation or PoC.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-65016](https://github.com/n8n-io/n8n/security/advisories/GHSA-35q8-9mj6-wjmf) n8n versi... https://github.com/n8n-io/n8n/security/advisories/GHSA-35q8-9mj6-wjmf #PatchManagement #Vulnerability #CVE
Post summary
A new vulnerability, CVE‑2026‑65016, for n8n has been announced and linked to a GitHub advisory. The post does not provide any PoC, exploit details, or explicit patch information.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n8n | n8n | - | node.js | - |
| App | n8n | n8n | - | node.js | - |
| App | n8n | n8n | 2.30.0 | node.js | - |
| App | n8n | n8n | 2.30.0 | node.js | - |