CVE-2026-86085 n8n-io CVE debrief

Who should care

Defenders responsible for n8n instances should assess exposure and apply patches to prevent unauthorized access. This includes verifying the exposure of n8n instances, applying patches to affected instances, and monitoring for potential security incidents. Security teams and vulnerability management teams should also review the vulnerability and its potential impact on their organization.

Why it matters

CVE-2026-86085 is a medium-severity vulnerability in the n8n workflow automation platform that allows unauthorized access to member information. Defenders responsible for n8n instances should assess exposure and apply patches to prevent unauthorized access.

• Potential unauthorized access to member names and email addresses
• Need to verify exposure of n8n instances to this vulnerability
• Priority on applying patches to affected instances
• Monitoring for potential security incidents

Technical summary

The /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints in n8n did not properly check permissions, allowing unauthorized access to member information. The affected controller is packages/cli/src/controllers/role.controller.ts, which omitted the project:list scope check. This issue is fixed in versions 2.37.7 and 2.38.2. Defenders should prioritize verifying exposure and applying patches to affected n8n instances. The vulnerability has a CVSS score of 5.1 and a medium severity.

Defensive priority

Defenders should prioritize verifying exposure and applying patches to affected n8n instances.

Recommended defensive actions

• Verify exposure of n8n instances to this vulnerability
• Apply patches to affected instances
• Monitor for potential unauthorized access
• Review compensating controls for exposed systems
• Check relevant monitoring, detection, and logs for exposed assets
• Track exceptions and retest remediated assets
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, affected versions, and fixed versions. The vulnerability allows unauthorized access to member information through the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints. The issue was reported and fixed by the n8n team. Defenders should verify exposure and apply patches to affected instances.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.