Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 2

Количество 2

nvd логотип

CVE-2026-59253

около 2 месяцев назад

n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and folder authorization boundaries by supplying crafted request payloads during workflow creation, causing logical integrity violations in target project folder structures.

CVSS3: 5
EPSS: Низкий
github логотип

GHSA-2xgm-wc4g-5jvg

около 1 месяца назад

n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-59253

n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and folder authorization boundaries by supplying crafted request payloads during workflow creation, causing logical integrity violations in target project folder structures.

CVSS3: 5
0%
Низкий
около 2 месяцев назад
github логотип
GHSA-2xgm-wc4g-5jvg

n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

0%
Низкий
около 1 месяца назад

Уязвимостей на страницу