CVE-2026-85171

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.73 n8n versions prior to 2.35.4 n8n versions prior to 2.36.2

Description A credential exposure issue exists in the Strapi, SeaTable, and Mailcheck nodes. These nodes transmit decrypted credentials to the authentication endpoint using a raw legacy HTTP helper without proper error handling, which results in plaintext secrets being stored within execution error data. An authenticated user can retrieve these plaintext secrets from their own execution via the REST API, bypassing the redaction mechanisms of the credentials API.

Recommendations Update to version 1.123.73 or later. Update to version 2.35.4 or later. Update to version 2.36.2 or later.