CVE-2026-77073CWE-639

CVE-2026-77073

Medium · published August 20, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references on workflows in different projects.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
5.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
EPSS
0.00345 · 26.7th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-08-20T16:16Z
Affected products (2)
ProductVersionsFixed in
n8n/n8n< 2.33.42.33.4
n8n/n8nall versions—
References (2)
https://github.com/n8n-io/n8n/security/advisories/GHSA-vfrj-582q-mvcp · [email protected]https://www.vulncheck.com/advisories/n8n-before-cross-project-credential-access-via-mcp · [email protected]
EPSS history
Timeline
  • 20 AUG 11:21Z
    n8n before 2.34.1 Cross-Project Credential Access via MCP
    cvelistv5