{"id":"EUVD-2026-42262","enisaUuid":"cbe772eb-6937-3987-97a6-9594d61cc936","description":"n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing actions using the workflow:read scope instead of the action-appropriate workflow:execute scope. On instances using Advanced Permissions (Enterprise/Cloud) with projects and viewer roles, an authenticated user with the project:viewer role can start new evaluation test runs, cancel in-flight runs, and delete run records for workflows they only have read access to.","datePublished":"Jul 8, 2026, 1:49:06 PM","dateUpdated":"Oct 29, 2026, 9:15:58 PM","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-664h-gpgq-h6xx\nhttps://www.vulncheck.com/advisories/n8n-incorrect-oauth-scope-validation-in-evaluation-test-runs-endpoints\n","aliases":"CVE-2026-56775\nGHSA-w79j-mf7m-gfpm\n","assigner":"VulnCheck","epss":0.3,"enisaIdProduct":[{"id":"004875fc-31c7-3aee-862b-43c3dece917a","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c1.123.55"},{"id":"170c7842-47d4-3475-a9d9-2746de83eb69","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.26.0 \u003c2.26.2"},{"id":"5d4577fb-3af7-31bf-8a93-929b82c612be","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0 \u003c2.25.7"}],"enisaIdVendor":[{"id":"f2f2b756-5fc8-339a-9e1a-208f2c3f589f","vendor":{"name":"n8n"}}],"enisaIdVulnerability":[{"id":"4ff57a79-0065-30a9-b0db-c67fca64a4fa","vulnerability":{"id":"CVE-2026-56775","description":"n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing actions using the workflow:read scope instead of the action-appropriate workflow:execute scope. On instances using Advanced Permissions (Enterprise/Cloud) with projects and viewer roles, an authenticated user with the project:viewer role can start new evaluation test runs, cancel in-flight runs, and delete run records for workflows they only have read access to.","datePublished":"Jul 8, 2026, 1:49:06 PM","dateUpdated":"Oct 29, 2026, 9:15:58 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-664h-gpgq-h6xx\nhttps://www.vulncheck.com/advisories/n8n-incorrect-oauth-scope-validation-in-evaluation-test-runs-endpoints\n","enisa_id":"EUVD-2026-42262\n","assigner":"VulnCheck","epss":0.3,"dataProcessed":"Oct 30, 2026, 11:00:50 AM","vulnerabilityProduct":[{"id":"347434f0-98c8-3cdc-8841-2b386846ca94","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0 \u003c2.25.7"},{"id":"b8179890-1305-3021-a99d-6830da1959cf","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c1.123.55"},{"id":"b92512a9-94e0-3486-a9c7-3416f5b0d6e8","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.26.0 \u003c2.26.2"}],"vulnerabilityVendor":[{"id":"4ffe2b24-f6dc-3837-8d29-a6fce2a9898d","vendor":{"name":"n8n"}}]}},{"id":"85ef5237-300f-3cde-8170-63f66901bd46","vulnerability":{"id":"GHSA-w79j-mf7m-gfpm","description":"n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing actions using the workflow:read scope instead of the action-appropriate workflow:execute scope. On instances using Advanced Permissions (Enterprise/Cloud) with projects and viewer roles, an authenticated user with the project:viewer role can start new evaluation test runs, cancel in-flight runs, and delete run records for workflows they only have read access to.","datePublished":"Jul 8, 2026, 3:32:01 PM","dateUpdated":"Jul 8, 2026, 3:32:01 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-664h-gpgq-h6xx\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-56775\nhttps://www.vulncheck.com/advisories/n8n-incorrect-oauth-scope-validation-in-evaluation-test-runs-endpoints\n","enisa_id":"EUVD-2026-42262\n","aliases":"GHSA-w79j-mf7m-gfpm\nCVE-2026-56775\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}