MEDIUM n8n: n8n CVE-2026-65014 — n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webh
Why it matters
n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook
Fix it — 2 steps
- Upgrade to 2.27.4 or later. This is the only complete fix.
- Until patched, take it off the internet: `sudo ufw deny 5678` or bind it to localhost.
Verify it’s fixed
curl -s http://YOUR_SERVER_IP:5678/rest/settings | grep -o 'n8n@[0-9.]*' # must be >= 2.27.4
References
Not sure if your stack is exposed?
Run the free check — 30 seconds, safe read-only probes.
Scan your stack