CVE-2026-86996: Missing Authorization in n8n AI Agent Workflow Tool Execution
Vulnerability ID: CVE-2026-86996
CVSS Score: 5.3
Published: 2026-09-08
A missing authorization vulnerability (CWE-862) exists in n8n where AI Agent workflows executing as tools bypass the Sub-Workflow Caller Policy settings, allowing authenticated users with agent creation privileges to invoke unauthorized sub-workflows across project boundaries.
TL;DR
n8n AI Agents executing workflows as tools bypass configured 'Sub-Workflow Caller Policy' restrictions, enabling low-privileged authenticated users to execute unauthorized workflows.
Technical Details
- CWE ID: CWE-862
- Attack Vector: Network (AV:N)
- CVSS v4.0: 5.3
- Impact: Partial Confidentiality & Integrity Loss
- Exploit Status: None (No Public PoC)
- KEV Status: Not Listed
Affected Systems
- n8n Workflow Automation Platform
-
n8n: < 2.37.7 (Fixed in:
2.37.7) -
n8n: >= 2.38.0 and < 2.38.2 (Fixed in:
2.38.2)
Mitigation Strategies
- Upgrade n8n instances to version 2.37.7, 2.38.2, or later.
- Restrict AI Agent configuration privileges to administrative users.
- Perform routine audits of workflow tool mappings across all workspaces.
Remediation Steps:
- Identify the current running version of the n8n platform.
- If the version is in the 2.37.x line and older than 2.37.7, plan an upgrade path to 2.37.7.
- If the version is in the 2.38.x line and older than 2.38.2, plan an upgrade path to 2.38.2.
- Apply the update using the preferred package manager or Docker container deployment mechanism.
- Verify the installation by running an automated tool check on the workflow-tool-factory module.
References
Read the full report for CVE-2026-86996 on our website for more details including interactive diagrams and full exploit analysis.
Top comments (0)