{"uuid": "85f70f03-d097-4db2-bd4b-c9e9e93019e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86996", "type": "seen", "source": "https://gist.github.com/alon710/945de2feac7eaeacc7983ae793855e7b", "content": "# CVE-2026-86996: CVE-2026-86996: Missing Authorization in n8n AI Agent Workflow Tool Execution\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-09-08\n> **Full Report:** https://cvereports.com/reports/CVE-2026-86996\n\n## Summary\nA missing authorization vulnerability (CWE-862) exists in n8n where AI Agent workflows executing as tools bypass the Sub-Workflow Caller Policy settings, allowing authenticated users with agent creation privileges to invoke unauthorized sub-workflows across project boundaries.\n\n## TL;DR\nn8n AI Agents executing workflows as tools bypass configured 'Sub-Workflow Caller Policy' restrictions, enabling low-privileged authenticated users to execute unauthorized workflows.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 5.3\n- **Impact**: Partial Confidentiality & Integrity Loss\n- **Exploit Status**: None (No Public PoC)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- n8n Workflow Automation Platform\n- **n8n**: < 2.37.7 (Fixed in: `2.37.7`)\n- **n8n**: >= 2.38.0 and < 2.38.2 (Fixed in: `2.38.2`)\n\n## Mitigation\n\n- Upgrade n8n instances to version 2.37.7, 2.38.2, or later.\n- Restrict AI Agent configuration privileges to administrative users.\n- Perform routine audits of workflow tool mappings across all workspaces.\n\n**Remediation Steps:**\n1. Identify the current running version of the n8n platform.\n2. If the version is in the 2.37.x line and older than 2.37.7, plan an upgrade path to 2.37.7.\n3. If the version is in the 2.38.x line and older than 2.38.2, plan an upgrade path to 2.38.2.\n4. Apply the update using the preferred package manager or Docker container deployment mechanism.\n5. Verify the installation by running an automated tool check on the workflow-tool-factory module.\n\n## References\n\n- [GHSA-7hgx-277f-7vmg](https://github.com/n8n-io/n8n/security/advisories/GHSA-7hgx-277f-7vmg)\n- [n8n v2.37.7 Release Tag](https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7)\n- [n8n v2.38.2 Release Tag](https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2)\n- [CVE-2026-86996 Record](https://www.cve.org/CVERecord?id=CVE-2026-86996)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-86996) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-08T22:32:40.256103Z"}