n8n CVE-2026-103247

Exploitation requires an authenticated account with EDITOR access to a workflow that is SHARED with a higher-privileged victim (PR:L) - not available to anonymous or read-only users. The attacker must construct a node whose ID duplicates an existing node while the node name is mismatched, triggering the ID-versus-name matching flaw that bypasses the workflow credential tamper guard (the AT:P attack requirement). Realistic risk is therefore concentrated in multi-tenant or team deployments where low-privilege editors collaborate on shared workflows with credentials owned by others; single-user or fully-trusted-editor installations are effectively unaffected. Patched in n8n 1.123.80.

This is a moderate-risk, authenticated authorization flaw (CWE-639) rather than a top-priority emergency. The vendor-supplied CVSS 4.0 vector (5.8, AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N with subsequent-system SC:H/SI:H/SA:H) tells a consistent story: network-reachable but gated behind editor-level authentication (PR:L) and a specific exploitation precondition (AT:P - the attacker must craft duplicate node IDs that defeat the tamper guard). Direct confidentiality impact is only Low (VC:L), with the elevated subsequent-system metrics (SC:H/SI:H/SA:H) reflecting the harm of redirecting victim credentials to an attacker-controlled downstream host. There is NO EPSS score, NO CISA KEV listing, and NO public proof-of-concept provided, so this is 'no public exploit identified at time of analysis.' The signals do not conflict, but note the exploitation gate: it requires an existing editor account on a SHARED workflow, which bounds it to insider/multi-tenant abuse rather than mass internet exploitation. A patch is confirmed available (GHSA-7gjv-rcf8-x5qc, fixed in 1.123.80). Verdict: patch in normal cadence; prioritize if n8n is used in multi-tenant/shared-workflow deployments where low-privilege editors are not fully trusted.

An attacker holding editor access to a workflow shared with a higher-privileged victim constructs a node whose ID collides with (duplicates) a legitimate node while using a mismatched name, defeating n8n's credential tamper guard. The guard fails to detect that the node now references the victim's stored credential, so the attacker retains that credential and rewrites the request target (e.g. host field) to an attacker-controlled endpoint, causing the victim's secrets to be transmitted to the attacker on the next execution. No public exploit code was identified at the time of analysis.