CyberRota Analysis
AI-Generatedn8n versions prior to 2.34.1 and 2.33.4 are vulnerable to an authorization bypass that allows users with limited project management permissions to delete custom project roles and reassign users to the project:admin role. This flaw can lead to unauthorized administrative access, enabling potential exploitation of project resources. Organizations using affected versions should prioritize immediate updates to mitigate the risk of privilege escalation and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion (reassignment) path. When deleting a custom project role with a reassignment target, the code validated only that the target role existed and was project-scoped, performing no project-level authorization check. A user holding only the narrow role:manageProject global scope could delete any custom project role in use on the instance and reassign its holders (including themselves) to the built-in project:admin role, gaining full administrative control of projects they had no legitimate access to.
Related CVEs
Other vulnerabilities affecting the same vendor(s)