Prototype Pollution Vulnerability in n8n Workflow-Validation Tool by n8n

CVE-2026-110842

What is CVE-2026-110842?

The n8n workflow-validation tool is affected by a prototype pollution issue that allows an authenticated user with only 'workflow:read' permissions to manipulate methods in the main process. This vulnerability permits the user to replace default methods with custom versions that can return true values, thereby bypassing server-side permission checks. As a result, attackers could gain unauthorized access to owner accounts that lack Multi-Factor Authentication (MFA), leading to potential account takeovers.

References