{"id":"CVE-2026-86085","title":"n8n is an open source workflow automation platform","summary":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. …","severity":"medium","cvss":4.9,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-862"],"vendor":"n8n","product":"n8n","affected":["n8n < 2.37.7","n8n >= 2.38.0, < 2.38.2"],"patched":["n8n 2.38.2"],"published":"2026-09-08","updated":"2026-09-14","sourceUpdated":"2026-09-14T13:18:57.623","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86085","references":[{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-cqr2-h44g-v75v","label":"security-advisories@github.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86085"},{"url":"https://github.com/advisories/GHSA-cqr2-h44g-v75v"}],"tags":["nvd","cve.org","ghsa","npm"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-14T12:02:07.579107Z"},"scores":{"nvd":4.9,"cna":5.1},"epss":0.00255,"epssPercentile":0.1741,"aliases":["GHSA-cqr2-h44g-v75v"],"ecosystem":"npm","ingestedAt":"2026-09-08T22:12:31.039Z","slug":"CVE-2026-86085","body":"## Overview\n\nn8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the caller could not list and obtain member names and email addresses. The affected controller is packages/cli/src/controllers/role.controller.ts, which omitted the project:list scope check. This issue is fixed in versions 2.37.7 and 2.38.2.\n\n## Affected\n\n- `n8n < 2.37.7`\n- `n8n >= 2.38.0, < 2.38.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `n8n 2.38.2`\n\n## Package advisory (CVE-2026-86085)\n\nAffected packages:\n\n- `n8n >= 2.38.0, < 2.38.2`\n- `n8n < 2.37.7`\n\nPatched in:\n\n- `n8n 2.38.2`\n- `n8n 2.37.7`\n\nSource: https://github.com/advisories/GHSA-cqr2-h44g-v75v","depth":"sunlit","depthScore":27,"depthScoreParts":{"impact":27,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202075,"id":"CVE-2026-86085","ts":1789400047545,"field":"cvss","old":"5.1","new":"4.9"},{"seq":200802,"id":"CVE-2026-86085","ts":1789397615821,"field":"cvss","old":"4.9","new":"5.1"},{"seq":199495,"id":"CVE-2026-86085","ts":1789395521903,"field":"cvss","old":"5.1","new":"4.9"},{"seq":198740,"id":"CVE-2026-86085","ts":1789392243435,"field":"cvss","old":"4.9","new":"5.1"},{"seq":197073,"id":"CVE-2026-86085","ts":1789384291827,"field":"cvss","old":"5.1","new":"4.9"},{"seq":194202,"id":"CVE-2026-86085","ts":1789378782491,"field":"cvss","old":"4.9","new":"5.1"},{"seq":192989,"id":"CVE-2026-86085","ts":1789376514480,"field":"cvss","old":"5.1","new":"4.9"},{"seq":191776,"id":"CVE-2026-86085","ts":1789373630501,"field":"cvss","old":"4.9","new":"5.1"},{"seq":190561,"id":"CVE-2026-86085","ts":1789369474727,"field":"cvss","old":"5.1","new":"4.9"},{"seq":189348,"id":"CVE-2026-86085","ts":1789368408477,"field":"cvss","old":"4.9","new":"5.1"},{"seq":188131,"id":"CVE-2026-86085","ts":1789365230143,"field":"cvss","old":"5.1","new":"4.9"},{"seq":186918,"id":"CVE-2026-86085","ts":1789363470691,"field":"cvss","old":"4.9","new":"5.1"},{"seq":185704,"id":"CVE-2026-86085","ts":1789361228483,"field":"cvss","old":"5.1","new":"4.9"},{"seq":184491,"id":"CVE-2026-86085","ts":1789358363085,"field":"cvss","old":"4.9","new":"5.1"},{"seq":182742,"id":"CVE-2026-86085","ts":1789354316497,"field":"cvss","old":"5.1","new":"4.9"},{"seq":181535,"id":"CVE-2026-86085","ts":1789353317102,"field":"cvss","old":"4.9","new":"5.1"},{"seq":180328,"id":"CVE-2026-86085","ts":1789350284121,"field":"cvss","old":"5.1","new":"4.9"},{"seq":179121,"id":"CVE-2026-86085","ts":1789348292266,"field":"cvss","old":"4.9","new":"5.1"},{"seq":177914,"id":"CVE-2026-86085","ts":1789346369417,"field":"cvss","old":"5.1","new":"4.9"},{"seq":176707,"id":"CVE-2026-86085","ts":1789343183923,"field":"cvss","old":"4.9","new":"5.1"},{"seq":174824,"id":"CVE-2026-86085","ts":1789334875052,"field":"cvss","old":"5.1","new":"4.9"},{"seq":173619,"id":"CVE-2026-86085","ts":1789333686237,"field":"cvss","old":"4.9","new":"5.1"},{"seq":172433,"id":"CVE-2026-86085","ts":1789331092408,"field":"cvss","old":"5.1","new":"4.9"},{"seq":171247,"id":"CVE-2026-86085","ts":1789328780289,"field":"cvss","old":"4.9","new":"5.1"},{"seq":170042,"id":"CVE-2026-86085","ts":1789327196556,"field":"cvss","old":"5.1","new":"4.9"},{"seq":168837,"id":"CVE-2026-86085","ts":1789323839455,"field":"cvss","old":"4.9","new":"5.1"},{"seq":167632,"id":"CVE-2026-86085","ts":1789319701847,"field":"cvss","old":"5.1","new":"4.9"},{"seq":166427,"id":"CVE-2026-86085","ts":1789318775533,"field":"cvss","old":"4.9","new":"5.1"},{"seq":165222,"id":"CVE-2026-86085","ts":1789315789390,"field":"cvss","old":"5.1","new":"4.9"},{"seq":164017,"id":"CVE-2026-86085","ts":1789313633687,"field":"cvss","old":"4.9","new":"5.1"},{"seq":162812,"id":"CVE-2026-86085","ts":1789311902806,"field":"cvss","old":"5.1","new":"4.9"},{"seq":161607,"id":"CVE-2026-86085","ts":1789308732625,"field":"cvss","old":"4.9","new":"5.1"},{"seq":159720,"id":"CVE-2026-86085","ts":1789300469997,"field":"cvss","old":"5.1","new":"4.9"},{"seq":156709,"id":"CVE-2026-86085","ts":1789294755051,"field":"cvss","old":"4.9","new":"5.1"},{"seq":155504,"id":"CVE-2026-86085","ts":1789292967328,"field":"cvss","old":"5.1","new":"4.9"},{"seq":154299,"id":"CVE-2026-86085","ts":1789289796974,"field":"cvss","old":"4.9","new":"5.1"},{"seq":151550,"id":"CVE-2026-86085","ts":1789277629268,"field":"cvss","old":"5.1","new":"4.9"},{"seq":150511,"id":"CVE-2026-86085","ts":1789276245066,"field":"cvss","old":"4.9","new":"5.1"},{"seq":149478,"id":"CVE-2026-86085","ts":1789273824114,"field":"cvss","old":"5.1","new":"4.9"},{"seq":148445,"id":"CVE-2026-86085","ts":1789271348153,"field":"cvss","old":"4.9","new":"5.1"},{"seq":146476,"id":"CVE-2026-86085","ts":1789269394002,"field":"cvss","old":"5.1","new":"4.9"},{"seq":145281,"id":"CVE-2026-86085","ts":1789266338994,"field":"cvss","old":"4.9","new":"5.1"},{"seq":144185,"id":"CVE-2026-86085","ts":1789262616159,"field":"cvss","old":"5.1","new":"4.9"},{"seq":143089,"id":"CVE-2026-86085","ts":1789261532848,"field":"cvss","old":"4.9","new":"5.1"},{"seq":141920,"id":"CVE-2026-86085","ts":1789258831177,"field":"cvss","old":"5.1","new":"4.9"},{"seq":140761,"id":"CVE-2026-86085","ts":1789256726569,"field":"cvss","old":"4.9","new":"5.1"},{"seq":139563,"id":"CVE-2026-86085","ts":1789254831460,"field":"cvss","old":"5.1","new":"4.9"},{"seq":138365,"id":"CVE-2026-86085","ts":1789251933652,"field":"cvss","old":"4.9","new":"5.1"},{"seq":137167,"id":"CVE-2026-86085","ts":1789247832139,"field":"cvss","old":"5.1","new":"4.9"},{"seq":135969,"id":"CVE-2026-86085","ts":1789247055411,"field":"cvss","old":"4.9","new":"5.1"}]}