{"data":{"id":"9cd60674-ddbf-43db-b4ca-9740dfe1c9cb","title":"GHSA-2xgm-wc4g-5jvg: n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects","summary":"An authenticated user with workflow-creation permission in one n8n project can bypass project and folder authorization checks by sending a crafted request payload. The new workflow is linked to a folder in another project the user cannot access. The workflow stays in the attacker's project, and the impact is limited to a database-level integrity violation of the target project's folder structure, affecting instances with multi-project and folder support enabled.","solution":"The issue has been fixed in n8n version 2.28.0. Upgrade to this version or later. As a temporary workaround, restrict project membership and workflow creation permissions to fully trusted users only, noting that this does not fully remediate the risk.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-2xgm-wc4g-5jvg","publishedAt":"2026-07-22T22:24:43.000Z","cveId":"CVE-2026-59253","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["n8n@< 2.28.0 (fixed: 2.28.0)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0028,"epssCheckedAt":"2026-11-12T15:03:08.463Z","kevDateAdded":null,"advisoryAliases":["GHSA-2xgm-wc4g-5jvg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-22T22:24:43.000Z","fixReleasedAt":"2026-06-23T11:50:09.595Z","daysToFix":-29,"fixCheckedAt":"2026-10-29T21:32:46.562Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.6,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.28.0","matchedVersion":"2.28.0","fixReleasedAt":"2026-06-23T11:50:09.595Z","daysToFix":-29,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:46.416Z"}]}}