Medium severityNVD Advisory· Published Aug 20, 2026

CVE-2026-77073

Description

n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references on workflows in different projects.

Affected products

N8n Io/N8nllm-fuzzy
Range: <2.34.1

Patches

Vulnerability mechanics

References

github.com/n8n-io/n8n/security/advisories/GHSA-vfrj-582q-mvcpnvd
www.vulncheck.com/advisories/n8n-before-cross-project-credential-access-via-mcpnvd

News mentions

N8n: 18 Vulnerabilities Including Code Execution and SSRF Disclosed in Batch
Vypr Intelligence · Aug 20, 2026

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000