Is CVE-2026-56350 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-56350?

CVE-2026-56350 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-56350

Description

n8n before 2.8.0 contains an authentication bypass vulnerability allowing authenticated SSO users to disable SSO enforcement through the API. Attackers can create local password credentials to authenticate directly, bypassing organizational SSO policies and identity-provider-enforced multi-factor authentication.