GHSA-w79j-mf7m-gfpmPublished
n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-56775 · Microsoft / collected KEV context
cve-program · CVE-2026-56775
- https://github.com/n8n-io/n8n/security/advisories/GHSA-664h-gpgq-h6xx
- https://www.vulncheck.com/advisories/n8n-incorrect-oauth-scope-validation-in-evaluation-test-runs-endpoints
euvd · EUVD-2026-42262
- https://github.com/n8n-io/n8n/security/advisories/GHSA-664h-gpgq-h6xx
- https://www.vulncheck.com/advisories/n8n-incorrect-oauth-scope-validation-in-evaluation-test-runs-endpoints
nvd · CVE-2026-56775
- https://github.com/n8n-io/n8n/security/advisories/GHSA-664h-gpgq-h6xx
- https://www.vulncheck.com/advisories/n8n-incorrect-oauth-scope-validation-in-evaluation-test-runs-endpoints
osv · GHSA-664h-gpgq-h6xx
Related operational evidence
Explicit CVE identifiers- n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints · Affected-version evidence changed · 29 Oct 2026