{"data":{"id":"74ef4aba-5c55-44e5-81f1-03994e2230a7","title":"GHSA-h3jj-5f3v-3685: n8n: Public API Execution Retry Authorization Bypass","summary":"n8n's Public API endpoint for retrying executions checks for workflow:read instead of workflow:execute. An authenticated user with read-only access to a shared workflow can therefore retry that workflow's executions, bypassing the read/execute permission boundary. The issue affects instances where workflows are shared with other users or across projects.","solution":"Fixed in n8n versions 2.25.7 and 2.26.2. Upgrade to one of these versions or later. If upgrading is not immediately possible, restrict workflow sharing to fully trusted users only and restrict network access to the n8n Public API to trusted users only. These workarounds do not fully remediate the risk and are short-term measures only.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-h3jj-5f3v-3685","publishedAt":"2026-06-16T22:40:06.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["n8n@< 2.25.7 (fixed: 2.25.7)","n8n@>= 2.26.0, < 2.26.2 (fixed: 2.26.2)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-h3jj-5f3v-3685"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-16T22:40:06.000Z","fixReleasedAt":"2026-06-10T08:43:36.967Z","daysToFix":-6,"fixCheckedAt":"2026-10-29T21:34:27.153Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.6,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.25.7","matchedVersion":"2.25.7","fixReleasedAt":"2026-06-10T08:45:26.303Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:27.006Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.26.2","matchedVersion":"2.26.2","fixReleasedAt":"2026-06-10T08:43:36.967Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:27.006Z"}]}}