CVE-2026-86996: Missing Authorization in n8n AI Agent Workflow Tool Execution

Vulnerability ID: CVE-2026-86996
CVSS Score: 5.3
Published: 2026-09-08

A missing authorization vulnerability (CWE-862) exists in n8n where AI Agent workflows executing as tools bypass the Sub-Workflow Caller Policy settings, allowing authenticated users with agent creation privileges to invoke unauthorized sub-workflows across project boundaries.

TL;DR

n8n AI Agents executing workflows as tools bypass configured 'Sub-Workflow Caller Policy' restrictions, enabling low-privileged authenticated users to execute unauthorized workflows.

Technical Details

• CWE ID: CWE-862
• Attack Vector: Network (AV:N)
• CVSS v4.0: 5.3
• Impact: Partial Confidentiality & Integrity Loss
• Exploit Status: None (No Public PoC)
• KEV Status: Not Listed

Affected Systems

• n8n Workflow Automation Platform
• n8n: < 2.37.7 (Fixed in: 2.37.7)
• n8n: >= 2.38.0 and < 2.38.2 (Fixed in: 2.38.2)

Mitigation Strategies

• Upgrade n8n instances to version 2.37.7, 2.38.2, or later.
• Restrict AI Agent configuration privileges to administrative users.
• Perform routine audits of workflow tool mappings across all workspaces.

Remediation Steps:

1. Identify the current running version of the n8n platform.
2. If the version is in the 2.37.x line and older than 2.37.7, plan an upgrade path to 2.37.7.
3. If the version is in the 2.38.x line and older than 2.38.2, plan an upgrade path to 2.38.2.
4. Apply the update using the preferred package manager or Docker container deployment mechanism.
5. Verify the installation by running an automated tool check on the workflow-tool-factory module.

References

• GHSA-7hgx-277f-7vmg
• n8n v2.37.7 Release Tag
• n8n v2.38.2 Release Tag
• CVE-2026-86996 Record

Read the full report for CVE-2026-86996 on our website for more details including interactive diagrams and full exploit analysis.