Skip to content
Threat Feed
Subscribe

Tag

Jwt-Exploitation

1 brief RSS
high advisory

n8n Privilege Escalation and Code Execution via Flawed JWT Scope Assignment (CVE-2026-65595)

A critical vulnerability, CVE-2026-65595, in n8n's Token Exchange module allows low-privileged users to achieve privilege escalation and potential code execution by exploiting incorrect Public API key scope assignments to JWTs, enabling administrative operations.

n8n >= 2.30.0, < 2.30.1 +1 privilege-escalation code-execution vulnerability jwt-exploitation
2t 1c