{"id":"EUVD-2026-47630","enisaUuid":"d530154a-028f-38ed-bdaf-78f6103d4951","description":"n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoint before authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow\u0027s active test webhook registration. The impact is limited to disrupting in-progress test sessions; production webhooks, persistent workflow state, and stored data are not affected.","datePublished":"Jul 22, 2026, 11:21:37 AM","dateUpdated":"Oct 29, 2026, 9:16:19 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-33q9-f52j-gc75\nhttps://www.vulncheck.com/advisories/n8n-before-authentication-bypass-via-test-webhook\n","aliases":"CVE-2026-65014\nGHSA-h9fm-xcv2-qfw3\nGHSA-33q9-f52j-gc75\n","assigner":"VulnCheck","epss":0.59,"enisaIdProduct":[{"id":"91e68824-136f-33d8-8cc0-2a1975209c97","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c2.27.4"}],"enisaIdVendor":[{"id":"0e75d96f-38ff-310a-b273-b12a03623f72","vendor":{"name":"n8n-io"}}],"enisaIdVulnerability":[{"id":"0cd4dbbb-c393-3fde-9280-8c40f0cc97b2","vulnerability":{"id":"GHSA-h9fm-xcv2-qfw3","description":"Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User\u0027s Active Test Webhook","datePublished":"Jul 22, 2026, 12:32:17 PM","dateUpdated":"Jul 22, 2026, 10:32:48 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-33q9-f52j-gc75\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-65014\nhttps://www.vulncheck.com/advisories/n8n-before-authentication-bypass-via-test-webhook\n","enisa_id":"EUVD-2026-47630\n","aliases":"GHSA-h9fm-xcv2-qfw3\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"6012693d-e4b2-30ab-8633-f69f0e921d0d","vulnerability":{"id":"GHSA-33q9-f52j-gc75","description":"n8n: Unauthenticated Endpoint Allows Cancellation of Any User\u0027s Active Test Webhook","datePublished":"Jul 22, 2026, 10:36:10 PM","dateUpdated":"Jul 22, 2026, 10:36:10 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-33q9-f52j-gc75\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-65014\nhttps://github.com/n8n-io/n8n\nhttps://github.com/n8n-io/n8n/releases/tag/n8n@2.27.4\nhttps://github.com/n8n-io/n8n/releases/tag/n8n@2.28.0\nhttps://www.vulncheck.com/advisories/n8n-before-authentication-bypass-via-test-webhook\n","enisa_id":"EUVD-2026-47630\n","aliases":"CVE-2026-65014\nGHSA-33q9-f52j-gc75\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"fad08a7d-c6fd-3409-983f-e097d606799b","vulnerability":{"id":"CVE-2026-65014","description":"n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoint before authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow\u0027s active test webhook registration. The impact is limited to disrupting in-progress test sessions; production webhooks, persistent workflow state, and stored data are not affected.","datePublished":"Jul 22, 2026, 11:21:37 AM","dateUpdated":"Oct 29, 2026, 9:16:19 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-33q9-f52j-gc75\nhttps://www.vulncheck.com/advisories/n8n-before-authentication-bypass-via-test-webhook\n","enisa_id":"EUVD-2026-47630\n","assigner":"VulnCheck","epss":0.59,"dataProcessed":"Nov 1, 2026, 7:16:13 AM","vulnerabilityProduct":[{"id":"6284ebcb-81da-3d75-a9bb-a845f8eb620e","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c2.27.4"}],"vulnerabilityVendor":[{"id":"dbcc7248-3fe0-367c-b6cb-5de5dc105566","vendor":{"name":"n8n-io"}}]}}],"enisaIdAdvisory":[]}