---
id: "GHSA-m7qq-gm3x-v79g"
page: "https://infrastack.ai/live/GHSA-m7qq-gm3x-v79g"
kind: "vulnerability"
aliases: ["GHSA-m7qq-gm3x-v79g"]
title: "Invitation Acceptance Endpoint Lets a Member Take Over Pending User Accounts"
severity: "high"
cvss: 7.7
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "n8n", "fixed": ["1.123.90"], "affected": "< 1.123.90", "ecosystem": "npm"}, {"name": "n8n", "fixed": ["2.14.0"], "affected": "< 2.14.0", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["ai-tooling", "automation", "cwe-287", "n8n", "self-hosted"]
not_affected_if: ["managed-hosting", "no-pending-invitations"]
published_at: "2026-11-13T10:55:10+00:00"
first_seen_at: "2026-11-13T11:06:24+00:00"
updated_at: "2026-11-13T11:06:57+00:00"
sources: [{"source": "ghsa-repo", "url": "https://github.com/n8n-io/n8n/security/advisories/GHSA-m7qq-gm3x-v79g", "first_seen_at": "2026-11-13T11:06:24+00:00"}]
exploit_sources: []
---

# Invitation Acceptance Endpoint Lets a Member Take Over Pending User Accounts

Link for people: https://infrastack.ai/live/GHSA-m7qq-gm3x-v79g (this .md is for agents)

n8n's invitation acceptance endpoint accepted user IDs without a signed invitation token, so a member who can list users can set the password of a pending account. The attacker can then log in as that user, or as an admin if the pending invitation had the admin role.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:n8n affected < 1.123.90 fixed 1.123.90
- npm:n8n affected < 2.14.0 fixed 2.14.0

## How to check

- Check the installed n8n version with `npm ls n8n` or `n8n --version`; versions below `1.123.90` on the 1.x line or below `2.14.0` on the 2.x line are affected.
- Look for pending invitations that have not been accepted in the n8n user management screen.

## Fix

- Upgrade n8n to `1.123.90` on the 1.x line.
- Upgrade n8n to `2.14.0` on the 2.x line.

## Timeline

- 2026-11-13T11:06:24+00:00 ghsa-repo https://github.com/n8n-io/n8n/security/advisories/GHSA-m7qq-gm3x-v79g

## Documents

- [advisory] Maintainer's advisory: github.com https://github.com/n8n-io/n8n/security/advisories/GHSA-m7qq-gm3x-v79g

## From the sources

## Impact

n8n let an invited user set up their account through the invitation acceptance endpoint. The endpoint accepted any inviter and invitee user IDs without a signed invitation token. A member with permission to list users could read the ID of a pending account and set its password without authentication. They could then log in as that user, with its project access, or as an admin when the pending invitation had the admin role.

Exploitation required an invitation that had not been accepted yet.

## Patches

The issue has been fixed in n8n versions 1.123.90 and 2.14.0. Users should upgrade to one of these versions or later to remediate the vulnerability.

## Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
- Restrict n8n instance access to fully trusted users only.
- Delete pending invitations that have not been accepted, and send new invitations after upgrading.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_