PT-2026-114158 · Git+1 · N8N
CVSS v4.0
7.2
High
| Vector | AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
n8n versions prior to 1.123.83
Description
An authorization bypass allows editors of shared workflows to utilize credentials they are not permitted to access. This is achieved by embedding restricted credentials within nested or tool inline sub-workflows. Specifically, users can save workflows using Workflow Tool or Workflow Retriever inline definitions that reference these restricted credentials, which then execute using the credential values of the workflow owner.
Recommendations
Update to version 1.123.83 or later.
Exploit
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
N8N