CVE-2026-110851— n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint
Quick assessment
Affected
n8n-io n8n
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 n8n 2.41.4 之前版本以及 2.42.x 中早于 2.42.1 的版本中，在创建 Agent 的接口（Agents create endpoint）中存在一个授权绕过漏洞。该接口允许调用者提供自定义的 Agent ID，仅对请求的项目进行权限检查，并在更新现有 Agent 时未验证该 Agent 所属的项目。因此，拥有对其他项目只读 Agent 访问权限的已认证用户，可以通过提供一个现有的 Agent ID，将该 Agent 迁移至自己的项目中，并改写其名称、结构和版本。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110851
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it. An authenticated user with read-only Agent access to another project can supply an existing Agent ID to move that Agent into their own project and rewrite its name, schema and version.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:L/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-110851
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110851
请登录查看更多情报信息。
Other References for CVE-2026-110851 (2)
Same Patch Batch · n8n-io · 2026-10-14 · 14 CVEs total
| CVE-2026-110843 | 8.2 HIGH | n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Author |
| CVE-2026-110842 | 7.7 HIGH | n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter |
| CVE-2026-110845 | 7.7 HIGH | n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation |
| CVE-2026-110850 | 7.2 HIGH | n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters |
| CVE-2026-110844 | 7.2 HIGH | n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows |
| CVE-2026-110849 | 7.2 HIGH | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview |
| CVE-2026-110853 | 7.1 HIGH | n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON |
| CVE-2026-110846 | 7.0 HIGH | n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook |
| CVE-2026-110847 | 7.0 HIGH | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter |
| CVE-2026-110840 | 7.0 HIGH | n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field |
| CVE-2026-110852 | 6.3 MEDIUM | n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Pat |
| CVE-2026-110841 | 6.1 MEDIUM | n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval |
| CVE-2026-110848 | 6.0 MEDIUM | n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connec |
IV. Related Vulnerabilities
Same product: n8n
-
CVE-2026-110853
n8n before 1.123.83 Authorization Bypass via Execute Sub-wor -
CVE-2026-110852
n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Work -
CVE-2026-110850
n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Age -
CVE-2026-110849
n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binar -
CVE-2026-110848
n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution
Same vendor: n8n-io
-
CVE-2026-110853
n8n before 1.123.83 Authorization Bypass via Execute Sub-wor -
CVE-2026-110852
n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Work -
CVE-2026-110850
n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Age -
CVE-2026-110849
n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binar -
CVE-2026-110848
n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution
Same weakness: CWE-639
-
CVE-2026-103525
FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct -
CVE-2026-89280
Dokan: AI Powered WooCommerce Multivendor Marketplace Soluti -
CVE-2026-111368
ClassroomIO through 1.0.0 IDOR via Course Submission Update, -
CVE-2026-111366
cool-admin-midway through 8.0.0 Authorization Bypass via /ad -
CVE-2026-111365
cool-admin-midway through 8.0.0 Missing Authorization via Sy
V. Comments for CVE-2026-110851
No comments yet