{"data":{"id":"86cb3cd6-f6a1-4bf2-a158-ed01d32682c7","title":"GHSA-w46p-w7w2-fr9g: Duplicate Advisory:  AI Agents Project Viewer Privilege Escalation via run_node_tool","summary":"This advisory is a withdrawn duplicate of GHSA-x5vx-c2c8-m3w9. The original description states that n8n versions before 2.30.1 contain a privilege escalation flaw in the AI Agents feature, where the node-execution tool lacks proper authorization checks. A Project Viewer user can chat with an agent that has node tools enabled, execute arbitrary nodes and access credential secrets without authorization verification.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-w46p-w7w2-fr9g","publishedAt":"2026-07-22T12:32:17.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.29.8"],"affectedPackageNames":["n8n"],"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["n8n AI Agents"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-w46p-w7w2-fr9g"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-07-22T12:32:17.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}