← CVE Radar
CVE-2026-59208n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
n8n is an open source workflow automation platform. Prior to 2.27.4 and from 2.28.0 prior to 2.28.1, n8n instances configured with more than one trusted token-exchange issuer resolved external identities to local accounts using only the JWT sub claim and ignored the iss claim, allowing an attacker with a valid token from one trusted issuer and a sub matching a victim under another issuer to authenticate as that victim. This issue is fixed in versions 2.27.4 and 2.28.1.
7.6 HIGHEPSS 0.26%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.6 | HIGH | 4.0GitHub_M (CNA) | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
| 6.8 | MEDIUM | 3.1NVD | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N |
Details
- CVE ID
- CVE-2026-59208
- Status
- Analyzed
- Assigner (CNA)
- GitHub_M
- Published
- Jul 9, 2026
- Last modified
- 2026-10-25 17:10 UTC
Affected Products
As published by the CNA in the CVE record.
n8n-ion8n2 version ranges
- >= 2.28.0, < 2.28.1
- < 2.27.4