{"data":{"id":"c58c5fa5-35ed-4adf-8f04-6877792ead00","title":"GHSA-pf83-w3f9-8m37: n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions","summary":"n8n (a workflow automation platform) had a security flaw where OIDC endpoints (the login pathways that use OIDC, which is a single sign-on system) continued to work and issue valid sessions even after an administrator disabled OIDC in the settings. This affected n8n Enterprise instances where OIDC had been set up previously.","solution":"The issue has been fixed in n8n versions 1.123.76, 2.37.7, and 2.38.2. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators can temporarily disable or revoke the corresponding application or client at the IdP (identity provider, the system that handles login) level to prevent the OIDC flow from completing, or restrict network-level access to the n8n instance to trusted users only. The source notes these workarounds do not fully remediate the risk and should only be used as short-term measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-pf83-w3f9-8m37","publishedAt":"2026-09-10T21:07:24.000Z","cveId":"CVE-2026-86084","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0, < 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)","n8n@< 1.123.76 (fixed: 1.123.76)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00319,"patchAvailable":true,"disclosureDate":"2026-09-10T21:07:24.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.65,"researchCategory":null,"atlasIds":null}}