Executive brief
n8n is a workflow automation tool used to connect different software services and automate business tasks. A security flaw in its programming interface allows users who should only be able to view a workflow to actually trigger it to run again. This could lead to unauthorized data processing or repeated actions in connected business systems if workflows are shared across different teams or projects.
Technical details
An authorization bypass exists in the n8n Public API execution retry endpoint due to an incorrect scope check. The endpoint incorrectly validates the 'workflow:read' scope instead of the required 'workflow:execute' scope. An authenticated attacker with network access and read-only permissions to a shared workflow can exploit this to re-run previous executions of that workflow. This bypasses intended permission boundaries in multi-user or multi-project environments. The issue is resolved in versions 2.25.7 and 2.26.2.
Affected products
- n8n n8n < 2.25.7, 2.26.x < 2.26.2
Timeline
- 2026-06-10: advisory: GitHub Security Advisory published
- 2026-07-08: disclosed: NVD publication date