{"action":"Upgrade n8n to 2.8.0 or later.","affected":[{"fixed":"2.8.0","introduced":"0"}],"component":"n8n","cve_ids":["CVE-2026-56350"],"ecosystem":"npm","epss":0.00379,"exploited":false,"fixed_versions":["2.8.0"],"ghsa_id":"GHSA-vjf3-2gpj-233v","id":"tcs_01M5KGC5G9J2B8Y5GNNTZ813NW","modified_at":"2026-07-08T08:12:27.872103715Z","published_at":"2026-02-26T22:45:13Z","references":["https://osv.dev/vulnerability/GHSA-vjf3-2gpj-233v","https://github.com/n8n-io/n8n/security/advisories/GHSA-vjf3-2gpj-233v","https://github.com/n8n-io/n8n/commit/a70b2ea379086da3de103bb84811e88cadf29976","https://github.com/n8n-io/n8n","https://github.com/n8n-io/n8n/releases/tag/n8n@2.8.0"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-vjf3-2gpj-233v","url":"https://osv.dev/vulnerability/GHSA-vjf3-2gpj-233v"}],"summary":"n8n has an SSO Enforcement Bypass in its Self-Service Settings API"}