n8n AI Agents Project Viewer Privilege Escalation via run_node_tool (GHSA-x5vx-c2c8-m3w9)

Vulnerability Overview Vulnerability Name: AI Agents Project Viewer Privilege Escalation via run_node_tool Vulnerability ID: GHSA-x5vx-c2c8-m3w9 Severity: 7.2 / 10 (High) Publish Date: October 2, 2023 Affected Versions Affected Versions: - = 2.30.1 - >= 2.29.8 Description Impact: - In n8n's AI Agents feature, users with the "Project Viewer" role can escalate their privileges by interacting with agents that have node tools enabled. - The agent's node execution permissions are authorized solely by the scope and execute nodes using project credentials. - Project viewers can execute arbitrary nodes and access credentials they are not permitted to read. - If executable nodes such as "Execute Command" or "SSH" are enabled, project viewers can execute arbitrary commands on the n8n host. Remediation Patch: - The issue has been fixed in n8n versions 2.29.8 and 2.30.1. - Users should upgrade to one of these versions or a later version to mitigate the vulnerability. Temporary Mitigations If immediate upgrading is not possible, administrators should consider the following temporary mitigation measures: - Disable the AI Agents module by removing from the environment variable. - Restrict project membership to fully trusted users and avoid granting project viewer access to untrusted users. - Disable executable nodes (such as "Execute Command" and "SSH") if they are currently enabled, to limit potential impact. Additional Information CVSS v4 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Attack Requirements: Present - Privileges Required: Low - User Interaction: None - Confidentiality: High - Integrity: Low - Availability: None CVE ID: No known CVE CWE: No known CWE Credit: trap-bytes

Goal Reached Thanks to every supporter — we hit 100%!

n8n AI Agents Project Viewer Privilege Escalation via run_node_tool (GHSA-x5vx-c2c8-m3w9)

More from this source