Improper Authorization in n8n Allows Workflow Assignment Across Projects
Summary
GHSA-gqcv-rfj6-r29g: Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xgm-wc4g-5jvg. Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
n8n is an open-source workflow automation tool that enables users to connect various applications and automate tasks without extensive coding knowledge. It allows users to create workflows that can integrate with numerous services, making it a powerful tool for developers and non-developers alike. However, prior to version 2.28.0, n8n had a vulnerability that allowed authenticated users to assign workflows to folders in other projects, bypassing intended authorization controls.
Vulnerability Detail
The vulnerability in n8n arises from improper authorization checks that allow authenticated users to manipulate workflows across different project folders. This issue can lead to unauthorized access and modifications, potentially compromising the integrity of project data and workflows. Attackers can exploit this vulnerability by crafting specific request payloads during workflow creation, which can result in logical integrity violations within the target project folder structures. The vulnerability has been classified with a CVSS score of 5.0, indicating a moderate severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, it is advisable to restrict access to the n8n application by limiting user permissions and ensuring that only trusted users have authenticated access. This can help mitigate the risk of exploitation until the package is updated.
Conclusion
The improper authorization vulnerability in n8n prior to version 2.28.0 poses a risk to users by allowing unauthorized workflow assignments across projects. It is crucial to update to the latest version to mitigate this risk and ensure the integrity of your workflows.
See every vulnerability recorded for n8n →
FAQ
The vulnerability allows authenticated users to assign workflows to folders in other projects, bypassing authorization controls.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By checking your package-lock.json file, you can identify if your application is affected. You can also use the Vulert playground at Vulert Scanner without signing up.
If an immediate update is not possible, restrict user access and permissions to minimize the risk of exploitation.
The CVSS score of this vulnerability is 5.0, indicating a moderate severity level.
You can find more information on the official n8n GitHub repository and security advisories related to the package.
Related vulnerabilities
Recent vulnerabilities recorded for n8n.
