Sunkimsroul

**Name of the Vulnerable Software and Affected Versions** n8n versions prior to 1.123.83 **Description** An authorization bypass allows editors of shared workflows to utilize credentials they are not permitted to access. This is achieved by embedding restricted credentials within nested or tool inline sub-workflows. Specifically, users can save workflows using Workflow Tool or Workflow Retriever inline definitions that reference these restricted credentials, which then execute using the credential values of the workflow owner. **Recommendations** Update to version 1.123.83 or later.