CVE-2026-118675

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.85 n8n versions prior to 2.43.5 n8n versions prior to 2.44.1

Description A credential guard bypass allows editors of shared workflows to access restricted credentials by loading sub-workflows from URLs or local files. An attacker can configure the Execute Sub-workflow node using the url or localFile source to serve content that resolves project credentials and returns their decrypted values.

Recommendations Update to version 1.123.85 or later. Update to version 2.43.5 or later. Update to version 2.44.1 or later.