CVE-2026-56350EPSS p17.5%

CVE-2026-56350CVE-2026-56350

n8n / n8n

Description

n8n before 2.8.0 contains an authentication bypass vulnerability allowing authenticated SSO users to disable SSO enforcement through the API. Attackers can create local password credentials to authenticate directly, bypassing organizational SSO policies and identity-provider-enforced multi-factor authentication.

Scoring

CVSS 6.3 ()
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N
EPSS0.26% probability of exploitation · percentile 17.5% · 2026-08-14T12:00:27Z
Last modified2026-07-02
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.