{"data":{"id":"f84d51cd-d616-48f0-861f-b0e28ca67274","title":"GHSA-33q9-f52j-gc75: n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook","summary":"A vulnerability in n8n (a workflow automation tool) allows anyone on the network to cancel another user's active test webhook without logging in, because an endpoint wasn't protected by authentication checks. The impact is limited to disrupting testing sessions, not production systems or stored data.","solution":"Users should upgrade to the patched version once available. As temporary workarounds if upgrading isn't possible: restrict network access to n8n to trusted users only, or place n8n behind a reverse proxy or firewall (a security layer that filters traffic) requiring authentication before API access. These workarounds do not fully remediate the risk and should only be used as short-term measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-33q9-f52j-gc75","publishedAt":"2026-07-22T22:36:10.000Z","cveId":"CVE-2026-65014","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.27.4 (fixed: 2.27.4)"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-07-22T22:36:10.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.82,"researchCategory":null,"atlasIds":null}}