{"data":{"id":"15aab7ad-2a37-4dfa-ab33-2e429dd9ee02","title":"GHSA-x5vx-c2c8-m3w9: n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool","summary":"A user with the read-only Project Viewer role in n8n's AI Agents feature could escalate privileges by chatting with an agent that has node tools enabled. The run_node_tool path was authorized only by the agent:execute scope, so it ran nodes with project credentials without checking the requesting user's node-execution or credential-access rights. On instances with Execute Command or SSH enabled, this could extend to arbitrary command execution on the n8n host.","solution":"The issue is fixed in n8n versions 2.29.8 and 2.30.1; users should upgrade to one of these or later. If upgrading is not immediately possible, administrators may temporarily remove `agents` from the `N8N_ENABLED_MODULES` environment variable, restrict project membership to fully trusted users, and disable command-execution nodes such as Execute Command and SSH. The source states these workarounds do not fully remediate the risk.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-x5vx-c2c8-m3w9","publishedAt":"2026-07-22T17:55:55.000Z","cveId":"CVE-2026-65015","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n AI Agents"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00608,"epssCheckedAt":"2026-11-12T18:09:37.393Z","kevDateAdded":null,"advisoryAliases":["GHSA-x5vx-c2c8-m3w9"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-22T17:55:55.000Z","fixReleasedAt":"2026-07-08T08:21:33.484Z","daysToFix":-14,"fixCheckedAt":"2026-10-29T21:32:54.094Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.30.1","matchedVersion":"2.30.1","fixReleasedAt":"2026-07-08T08:21:33.484Z","daysToFix":-14,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:53.946Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.29.8","matchedVersion":"2.29.8","fixReleasedAt":"2026-07-08T08:52:18.611Z","daysToFix":-14,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:53.946Z"}]}}