Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
n8n before 2.30.1 and 2.29.8 assigns all Public API key scopes to JWTs issued through the Token Exchange module regardless of the acting user's role. On instances where the Token Exchange feature and Public API are enabled, a low-privileged user who can obtain a valid external JWT trusted by a configured issuer can use the resulting access token to invoke administrator-only Public API operations such as role escalation, user creation, and user deletion (role escalation requires an Advanced Permissions license), and, when unverified Community Package installation is enabled, achieve remote code execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-07-22 | 1 | Patch1 |
| 2026-07-30 | 1 | General1 |
| 2026-07-31 | 1 | Patch1 |
| 2026-08-04 | 1 | Patch1 |
| 2026-08-05 | 1 | General1 |
CVE-2026-65595 n8n 2.30.1以前および2.29.8の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/30/cve-2026-65595-n8n-23012298/ #IT #Security #cybersecurity
Post summary
The tweet simply promotes an explanatory article about CVE-2026-65595 affecting n8n, with no detailed technical information, PoC, exploit code, active exploitation evidence, or patch details mentioned directly.
CVE-2026-65595 n8n 2.30.1以前および2.29.8の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/30/cve-2026-65595-n8n-23012298/ #IT #Security #cybersecurity
Post summary
The provided text is a title and link to an article that promises to explain CVE‑2026‑65595 and its mitigation, but it contains no explicit technical details, PoC, patch information, or evidence of active exploitation.
CVE-2026-65595 n8n 2.30.1以前および2.29.8の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/30/cve-2026-65595-n8n-23012298/ #IT #Security #cybersecurity
Post summary
The blog post provides an explanation of CVE-2026-65595 affecting n8n versions 2.30.1 and 2.29.8, detailing the vulnerability and summarizing countermeasures.
CVE-2026-65595 n8n 2.30.1以前および2.29.8の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/30/cve-2026-65595-n8n-23012298/ #IT #Security #cybersecurity
Post summary
The article offers an easy-to-understand explanation of CVE-2026-65595 affecting n8n up to versions 2.30.1 and 2.29.8, covering impact and recommended countermeasures, but does not discuss active exploitation, PoC, or exploit code.
🚨High - n8n Privilege Escalation via Token Exchange (CVE-2026-65595) n8n before 2.30.1 / 2.29.8 assigns all Public API key scopes to JWTs issued through the Token Exchange module, regardless of the acting user's role. On instances where Token Exchange and the Public API are both enabled, a low-privileged user who can obtain a valid external JWT trusted by a configured issuer can mint an access token with full API scope. With it, the attacker can invoke administrator-only Public API operations - role escalation, user creation, and user deletion (role escalation needs an Advanced Permissions license) - and, where unverified Community Package installation is enabled, chain to remote code execution. CVSS 8.9. 👉Upgrade n8n to 2.30.1 or 2.29.8.
Post summary
The post discloses a high-severity privilege escalation flaw in n8n that can be mitigated by upgrading to specified releases.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n8n | n8n | - | node.js | - |
| App | n8n | n8n | - | node.js | - |
| App | n8n | n8n | 2.30.0 | node.js | - |
| App | n8n | n8n | 2.30.0 | node.js | - |