Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-77073

n8n before 2.34.1 Cross-Project Credential Access via MCP

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references on workflows in different projects.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n8n-io n8n

Default version status: unaffected

  • 2.34.0 to < 2.34.1affected
  • 2.34.1unaffected
pkg:npm/n8n

n8n-io n8n

Default version status: unaffected

  • 2.0.0 to < 2.33.4affected
  • 2.33.4unaffected
pkg:npm/n8n

References