GHSA-664h-gpgq-h6xx: n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints
- Identifier
- GHSA-664h-gpgq-h6xx
- Published
- Record updated
- Affected
- n8n >= 2.0.0-rc.0, < 2.25.7, fixed in 2.25.7, released June 10, 2026, 7 days before disclosure
- n8n >= 2.26.0, < 2.26.2, fixed in 2.26.2, released June 10, 2026, 7 days before disclosure
- n8n < 1.123.55, fixed in 1.123.55, released June 10, 2026, 7 days before disclosure
Summary
Three mutating endpoints in the n8n evaluation test runs controller check the workflow:read scope where workflow:execute is required. An authenticated user with the project:viewer role can start and cancel evaluation test runs and delete run records for workflows they can only read. The flaw affects only instances using Advanced Permissions (Enterprise/Cloud) with projects and viewer roles.
Mitigation
Fixed in n8n versions 1.123.55, 2.25.7, and 2.26.2; upgrade to one of these or later. Temporary workarounds: restrict project membership to fully trusted users only, and avoid granting viewer access to projects containing sensitive workflows. The source states these workarounds do not fully remediate the risk.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- n8nnpmDeclares an LLM dependency
Related items
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
- InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
- MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online