CVE-2026-65015
NONE—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
CWE-863CWE
Description
n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and accessing credential secrets without proper authorization verification.
Affected routers (0)
No routers currently mapped to this CVE in our database.