CVE-2026-110851 n8n-io CVE debrief

Who should care

Defenders managing n8n deployments, especially those using Agents across multiple projects, should assess exposure and apply patches or mitigations to prevent potential unauthorized Agent ownership changes.

Why it matters

CVE-2026-110851's authorization bypass in n8n's Agents create endpoint requires verification of n8n deployments, especially where Agents are used across multiple projects, to prevent potential unauthorized changes.

• Potential unauthorized changes to Agent configurations
• Cross-project Agent ownership transfer
• Modification of Agent name, schema, and version
• Verification of n8n deployment exposure and patching

Technical summary

The Agents create endpoint in n8n accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it. This allows an authenticated user with read-only Agent access to another project to supply an existing Agent ID and move that Agent into their own project, rewriting its name, schema, and version. The vulnerability requires verification of n8n deployments, especially where Agents are used across multiple projects, to prevent potential unauthorized changes.

Defensive priority

Defenders should prioritize verifying exposure in n8n deployments, especially where Agents are used across multiple projects, and apply vendor patches or mitigations.

Recommended defensive actions

• Verify n8n version and Agent configuration to assess exposure
• Apply patches or mitigations provided by the vendor
• Monitor Agent activity and project ownership changes
• Restrict access to Agents create endpoint
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the authorization bypass in n8n's Agents create endpoint. However, additional information on potential exploitation or impact is limited. Defenders should verify n8n deployments, especially where Agents are used across multiple projects, to assess exposure and apply vendor patches or mitigations. The source item and CVE record provide initial details, but further verification is required to understand the full scope of the vulnerability and potential impacts.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.