Privilege Escalation Vulnerability in n8n: AI Agents Project Viewer Exploit
Summary
GHSA-w46p-w7w2-fr9g: Duplicate Advisory: AI Agents Project Viewer Privilege Escalation via run_node_tool. Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
n8n is an open-source workflow automation tool that allows users to connect various applications and services to automate tasks. It features an AI Agents capability that enables users to interact with automated agents for executing tasks. However, prior to version 2.30.1, n8n had a significant vulnerability in its AI Agents feature, where the node-execution tool did not enforce proper authorization checks, leading to potential privilege escalation.
Vulnerability Detail
The vulnerability arises from the lack of authorization checks in the AI Agents feature of n8n versions before 2.30.1. A Project Viewer user can exploit this weakness by interacting with an agent that has node tools enabled. This allows them to execute arbitrary nodes and access sensitive credential secrets without proper authorization verification. The ramifications of this vulnerability are severe, as it could lead to unauthorized access to sensitive data and actions within the n8n environment.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can restrict access to the AI Agents feature for Project Viewer users until the package is updated. This can be done by modifying user roles and permissions within the n8n application settings.
Conclusion
The privilege escalation vulnerability in n8n's AI Agents feature poses a significant risk to users, particularly those with Project Viewer access. It is crucial to update to version 2.30.1 or later to mitigate this risk. Additionally, users can utilize Vulert to monitor their projects for vulnerabilities effectively.
See every vulnerability recorded for n8n →
FAQ
The vulnerability allows Project Viewer users to escalate their privileges by executing arbitrary nodes through the AI Agents feature without proper authorization.
You can check your n8n version by running 'n8n --version' in your terminal. If your version is below 2.30.1, you are affected by this vulnerability.
The risks include unauthorized access to sensitive data and the ability to execute arbitrary actions within the n8n environment, potentially compromising the entire workflow automation setup.
Yes, you can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just your package-lock.json file. You can check your application for vulnerabilities without any signup at the Vulert playground.
If immediate updating is not possible, consider restricting access to the AI Agents feature for Project Viewer users as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for n8n.
