CVE-2026-118643

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.85 n8n versions prior to 2.43.5 n8n versions prior to 2.44.1

Description Credential secrets are stored in execution error data when operations fail within the Git, MongoDB Atlas Vector Store, and Google Cloud Storage nodes. This allows users with permissions to view workflow executions, but without permissions to read credentials, to recover Git passwords or tokens, MongoDB database passwords, or Google access tokens.

Recommendations Update to version 1.123.85 or later. Update to version 2.43.5 or later. Update to version 2.44.1 or later.