CVE-2026-56778
n8n - Authorization Bypass in Public API Execution Retry Endpoint
CVSS Score
6.4
EPSS Score
0.0%
EPSS Percentile
0th
n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access to a shared workflow can use the Public API to retry executions of that workflow, bypassing the intended permission boundary between read and execute access. This affects instances where workflows are shared with other users or across projects.
| CWE | CWE-863 |
| Vendor | n8n |
| Product | n8n |
| Published | Jul 8, 2026 |
| Last Updated | Jul 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for n8n n8n
Be the first to know when new medium vulnerabilities affecting n8n n8n are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
n8n / n8n
0 < 2.26.2
n8n / n8n
0 < 2.25.7
References
Credits
🔍 ksw9722