CVE-2026-72774

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.67 n8n versions prior to 2.31.5 n8n versions prior to 2.32.1

Description A credential authorization bypass exists in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential by specifying the credential type via an expression. The issue occurs because the pre-execution permission check compares the unresolved expression rather than the resolved credential type, causing the ownership check to be skipped. This allows the member to use or exfiltrate credentials they were not granted, provided they know the target credential's identifier.

Recommendations Update to version 1.123.67 or later. Update to version 2.31.5 or later. Update to version 2.32.1 or later.