CVE-2026-86075 | n8n-io n8n up to 2.37.6/2.38.1 OAuth Server oauth-server.service.ts client_name/grant_types resource consumption (WID-SEC-2026-3165)

A vulnerability was found in n8n-io n8n up to 2.37.6/2.38.1. It has been classified as problematic. Affected is an unknown function of the file packages/cli/src/modules/oauth-server/oauth-server.service.ts of the component OAuth Server. The manipulation of the argument client_name/grant_types leads to resource consumption. This vulnerability is... Weiterlesen