CVE-2026-110851: n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it. An authenticated user with read-only Agent access to another project can supply an existing Agent ID to move that Agent into their own project and rewrite its name, schema and version.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.41.4 - Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.42.1
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated n8n user who has read-only Agent access to another project can exploit it. The attacker also needs a project they can use as the destination for the Agent.
What access or information does an attacker need?
The attacker needs the ID of an existing Agent in another project to supply to the Agents create endpoint. They do not need permission to modify the source project’s Agent, because the endpoint checks permissions only for the requested destination project.
What is the impact of a successful exploit?
The attacker can move the targeted Agent into their own project and replace its name, schema, and version. This can remove the original project’s ownership of the Agent and alter the Agent’s configuration.
Which versions are affected?
Affected versions are n8n releases before 2.41.4 and 2.42.x releases before 2.42.1.