CVE-2026-118676

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.85 n8n versions prior to 2.43.5 n8n versions prior to 2.44.1

Description An authorization bypass allows member users to utilize credentials they are not permitted to access by omitting default node parameters. This occurs because pre-execution checks skip credential slots when workflows are saved and executed, resulting in decrypted credential values being transmitted to destinations selected by the attacker.

Recommendations Update to version 1.123.85 or later. Update to version 2.43.5 or later. Update to version 2.44.1 or later.