← advisory ledger

ADVISORY UNAUTH-2026-0055
TYPE cve
PRODUCT n8n
SEVERITY MEDIUM

MEDIUM

n8n CVE-2026-65594

published 2026-08-05 · updated 2026-08-05

Why it matters

n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check

Affected versions

  • >=2.30.0,<2.30.1

Fixed in: 2.30.1

Mapping provenance: human-verified against the linked advisory, last checked 2026-07-29.

Fix it

Fix card: cve-2026-65594 →

References

Cite this record

unauth.dev advisory UNAUTH-2026-0055 — published 2026-08 · CC-BY 4.0

Canonical URL: https://unauth.dev/advisories/UNAUTH-2026-0055. This record is part of the unauth.dev advisory dataset, published under CC-BY 4.0: attribute "unauth.dev / Raúl Acedo". Schema: additive-only within v1; this id will never be renumbered or reused.