CVE-2026-77073 PUBLISHED

n8n before 2.34.1 Cross-Project Credential Access via MCP

Assigner: VulnCheck
Reserved: 20.08.2026 Published: 20.08.2026 Updated: 20.08.2026

n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references on workflows in different projects.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
CVSS Score: 5.3

Product Status

Vendor n8n-io
Product n8n
Versions Default: unaffected
  • affected from 0 to 2.34.1 (excl.)
  • Version 2.34.1 is unaffected
Vendor n8n-io
Product n8n
Versions Default: unaffected
  • affected from 0 to 2.33.4 (excl.)
  • Version 2.33.4 is unaffected

Credits

  • vonypeto reporter

References

Problem Types

  • Authorization Bypass Through User-Controlled Key CWE