CVE-2026-77073 — n8n before 2.34.1 Cross-Project Credential Access via MCP
n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a va…
Published: 2026-08-20 · CVSS: 5.3 · CVSS 4.0
n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references on workflows in different projects.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7