{"id":"EUVD-2026-47630","enisaUuid":"d530154a-028f-38ed-bdaf-78f6103d4951","description":"n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoint before authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow\u0027s active test webhook registration. The impact is limited to disrupting in-progress test sessions; production webhooks, persistent workflow state, and stored data are not affected.","datePublished":"Jul 22, 2026, 11:21:37 AM","dateUpdated":"Jul 22, 2026, 12:26:12 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-33q9-f52j-gc75\nhttps://www.vulncheck.com/advisories/n8n-before-authentication-bypass-via-test-webhook\n","aliases":"CVE-2026-65014\nGHSA-h9fm-xcv2-qfw3\nGHSA-33q9-f52j-gc75\n","assigner":"VulnCheck","epss":0.59,"enisaIdProduct":[{"id":"036584c8-dcb4-3d06-a6d7-aef4e55ab2e7","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c2.28.0"},{"id":"91e68824-136f-33d8-8cc0-2a1975209c97","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c2.27.4"}],"enisaIdVendor":[{"id":"0e75d96f-38ff-310a-b273-b12a03623f72","vendor":{"name":"n8n-io"}}],"enisaIdVulnerability":[{"id":"0cd4dbbb-c393-3fde-9280-8c40f0cc97b2","vulnerability":{"id":"GHSA-h9fm-xcv2-qfw3","description":"Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User\u0027s Active Test Webhook","datePublished":"Jul 22, 2026, 12:32:17 PM","dateUpdated":"Jul 22, 2026, 10:32:48 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-33q9-f52j-gc75\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-65014\nhttps://www.vulncheck.com/advisories/n8n-before-authentication-bypass-via-test-webhook\n","enisa_id":"EUVD-2026-47630\n","aliases":"GHSA-h9fm-xcv2-qfw3\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:58:26 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"6012693d-e4b2-30ab-8633-f69f0e921d0d","vulnerability":{"id":"GHSA-33q9-f52j-gc75","description":"n8n: Unauthenticated Endpoint Allows Cancellation of Any User\u0027s Active Test Webhook","datePublished":"Jul 22, 2026, 10:36:10 PM","dateUpdated":"Jul 22, 2026, 10:36:10 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-33q9-f52j-gc75\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-65014\nhttps://github.com/n8n-io/n8n\nhttps://github.com/n8n-io/n8n/releases/tag/n8n@2.27.4\nhttps://github.com/n8n-io/n8n/releases/tag/n8n@2.28.0\nhttps://www.vulncheck.com/advisories/n8n-before-authentication-bypass-via-test-webhook\n","enisa_id":"EUVD-2026-47630\n","aliases":"CVE-2026-65014\nGHSA-33q9-f52j-gc75\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:58:26 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"fad08a7d-c6fd-3409-983f-e097d606799b","vulnerability":{"id":"CVE-2026-65014","description":"n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoint before authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow\u0027s active test webhook registration. The impact is limited to disrupting in-progress test sessions; production webhooks, persistent workflow state, and stored data are not affected.","datePublished":"Jul 22, 2026, 11:21:37 AM","dateUpdated":"Jul 22, 2026, 12:26:12 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-33q9-f52j-gc75\nhttps://www.vulncheck.com/advisories/n8n-before-authentication-bypass-via-test-webhook\n","enisa_id":"EUVD-2026-47630\n","assigner":"VulnCheck","epss":0.59,"dataProcessed":"Oct 28, 2026, 7:15:03 AM","vulnerabilityProduct":[{"id":"1c9537a4-d7cb-3ee5-9695-bcb8faaaad76","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c2.28.0"},{"id":"6284ebcb-81da-3d75-a9bb-a845f8eb620e","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c2.27.4"}],"vulnerabilityVendor":[{"id":"dbcc7248-3fe0-367c-b6cb-5de5dc105566","vendor":{"name":"n8n-io"}}]}}],"enisaIdAdvisory":[]}