GHSA-2xgm-wc4g-5jvg: n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects
Summary
An authenticated user with workflow creation permissions in one project could bypass authorization checks to assign workflows to folders in other projects they don't have access to. The workflow stays in the attacker's project and isn't visible elsewhere, but the target project's folder structure is logically corrupted at the database level. This vulnerability only affects n8n instances that have multi-project and folder support enabled.
Solution / Mitigation
The issue has been fixed in n8n version 2.28.0. Users should upgrade to this version or later to remediate the vulnerability. As a temporary workaround, administrators should restrict project membership and workflow creation permissions to fully trusted users only, though this does not fully remediate the risk and should only be used as a short-term measure.
Vulnerability Details
EPSS: 0.2%
Yes
July 22, 2026
Classification
Affected Vendors
Affected Packages
Related Issues
Original source: https://github.com/advisories/GHSA-2xgm-wc4g-5jvg
First tracked: July 22, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 75%