{"data":{"id":"5a27a0c3-a89b-402b-8150-50ca6987d1c5","title":"GHSA-664h-gpgq-h6xx: n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints","summary":"Three mutating endpoints in the n8n evaluation test runs controller check the workflow:read scope where workflow:execute is required. An authenticated user with the project:viewer role can start and cancel evaluation test runs and delete run records for workflows they can only read. The flaw affects only instances using Advanced Permissions (Enterprise/Cloud) with projects and viewer roles.","solution":"Fixed in n8n versions 1.123.55, 2.25.7, and 2.26.2; upgrade to one of these or later. Temporary workarounds: restrict project membership to fully trusted users only, and avoid granting viewer access to projects containing sensitive workflows. The source states these workarounds do not fully remediate the risk.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-664h-gpgq-h6xx","publishedAt":"2026-06-17T13:55:59.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.25.7 (fixed: 2.25.7)","n8n@>= 2.26.0, < 2.26.2 (fixed: 2.26.2)","n8n@< 1.123.55 (fixed: 1.123.55)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-664h-gpgq-h6xx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-17T13:55:59.000Z","fixReleasedAt":"2026-06-10T08:37:01.502Z","daysToFix":-7,"fixCheckedAt":"2026-10-29T21:34:23.901Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.55","matchedVersion":"1.123.55","fixReleasedAt":"2026-06-10T08:37:01.502Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:23.754Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.25.7","matchedVersion":"2.25.7","fixReleasedAt":"2026-06-10T08:45:26.303Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:23.754Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.26.2","matchedVersion":"2.26.2","fixReleasedAt":"2026-06-10T08:43:36.967Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:23.754Z"}]}}