Vulnerability Details CVE-2026-65015
n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and accessing credential secrets without proper authorization verification.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 18.0%
CVSS Severity
CVSS v3 Score 8.8