Preliminary research

Ask the Agent Nicely: Two Authorization Bypasses in n8n AI Agents

Antonio De Turris · Antonio De Turris · 14 September 2026

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Two n8n agent paths omitted authorization enforced elsewhere. A read-only Project Viewer could execute tool nodes with project credentials, while the MCP client sent a shared credential to an arbitrary server without applying its allowed-domain restriction.

Record

Researcher

Antonio De Turris

Published by

Antonio De Turris

Date

14 September 2026

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• ai-agent
• auth-bypass
• mcp
• privilege-escalation
• info-leak
• rce
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Antonio De Turris, first published at the original source. Preserved copies are kept so the citation survives its host.