Notes from my vulnerability research, the advisories that come out of it, and a little more about me.
Ask the Agent Nicely: Two Authorization Bypasses in n8n AI Agents
Two authorization bypasses in n8n’s AI agents let low-privileged users perform actions beyond those allowed by their role, including executing arbitrary nodes and exfiltrating credentials in cleartext. In some configurations, the same attack path can also give a read-only user command execution on the n8n host.