EUVD-2026-112382
GHSA-8gwv-55hj-rf7m
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as member user
-
DeliveryBuild workflow referencing unauthorized credential
-
ExploitOmit default node parameters to bypass permission check
-
ExecutionSave and execute workflow
-
PersistDefaults restored, credential decrypted at runtime
-
ImpactExfiltrate decrypted credential to attacker destination
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization logic validation
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires an authenticated member-level account on a multi-user n8n instance (PR:L) and a credential present on that instance that the member is not authorized to use. The specific trigger is crafting a workflow that omits a node's default parameters so n8n's pre-execution credential authorization check classifies the credential slot as inactive and skips it, while the defaults are restored and the credential is used at execution time. Limiting factors: the flaw is only meaningful in shared/multi-tenant deployments where unprivileged members coexist with credentials they should not reach; a single-user or fully-trusted-user instance has no exploitable privilege boundary. High attack complexity (AC:H) reflects the parameter-omission manipulation needed. Affected: n8n before 1.123.85, before 2.43.5, and before 2.44.1. |
| Impact | This is a moderate-severity authorization flaw (CWE-863, vendor CVSS 4.0 base 5.1) whose real-world priority sits below critical but above negligible. The CVSS 4.0 vector (AV:N/AC:H/AT:N/PR:L/UI:N) shows a network-reachable issue that nonetheless requires authenticated access (PR:L - a member-level account on the n8n instance) and carries high attack complexity (AC:H), reflecting that the attacker must craft a workflow that deliberately omits default node parameters so the pre-execution credential check skips the relevant slot. Impact is concentrated on confidentiality: VC:L on the n8n system itself but SC:H on subsequent systems, because the decrypted credentials exfiltrated can unlock whatever downstream services they authenticate to. No EPSS score is provided in the input, and the vulnerability is NOT listed in CISA KEV; there is no public exploit identified at time of analysis (the two references are the GitHub Security Advisory and the VulnCheck advisory, not verified working exploit code). The vuln.today decision label is 'this_month', consistent with a real but non-emergency fix priority. In short: a genuine insider/multi-tenant privilege-boundary problem worth patching on a normal cycle, not a mass-exploitation internet emergency - its exploitability is gated by the need for an existing member account and knowledge of the parameter-omission trick. |
| Exploit ScenarioDerived | A member-level user on a shared n8n instance builds a workflow that references a credential owned by another user or team that they are not authorized to use. By omitting the node's default parameters, the pre-execution permission check treats that credential slot as inactive and skips it; at runtime n8n restores the defaults and the node uses the credential, sending its decrypted value to a destination the attacker controls. No public exploit code is identified at time of analysis, but the technique is fully described in the vendor advisory. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 28, 2026
n8n workflow automation instances before 1.123.85, 2.43.5, and 2.44.1 let a member-level user use credentials they are not authorized to access and have the decrypted values delivered to a destination of their choosing. The bypass works because n8n's pre-execution credential check only inspects credential slots it deems active based on stored parameters, where defaults are omitted, while execution restores those defaults and invokes the node with the credential anyway. Exploitation requires an authenticated member account on a shared or multi-user instance that holds credentials the member should not reach (PR:L, AC:H); the vendor has released fixed versions and no public exploit code has been identified at time of analysis. The vendor rates it CVSS 4.0 base 5.1 and our own assessment lands at moderate severity, placing priority below critical but above negligible.
RemediationAI
Vendor-released patch: upgrade to n8n 1.123.85, 2.43.5, or 2.44.1 (or any later release on the corresponding branch), as documented in the GitHub advisory GHSA-v9cx-v88r-42vw. No fixed version is available for older branches, so deployments on the 1.x line must move to 1.123.85 or later and 2.x deployments to 2.43.5 or 2.44.1 or later. If upgrading is not immediately possible, the vendor lists three temporary mitigations that do not fully remediate the risk: restrict access to the n8n instance to fully trusted users only, which removes the untrusted-member privilege boundary at the cost of collaboration; audit credential ownership and remove any credentials from the instance that should not be accessible to member-level users, which reduces the blast radius but may break existing workflows that depend on those credentials; and monitor execution logs for unexpected credential usage by member accounts, which is detective only and cannot prevent exfiltration once a workflow runs. Rotating any credential that may have been exposed through this path should be considered where member-level workflow authoring has been permitted.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
n8n is a node-based workflow automation platform distributed as the npm package n8n, in which workflows are JSON graphs of nodes; individual nodes declare credential slots that reference stored encrypted credentials, decrypted server-side at execution time to authenticate against external services. The root cause is CWE-863 (Incorrect Authorization): the pre-execution authorization check that verifies a workflow owner may use every referenced credential enumerated only the credential slots it classified as active, and it made that classification from the parameters as persisted, where node default values are omitted from the stored JSON. At execution the node's defaults are rehydrated, so a slot the check treated as inactive becomes live and the node consumes the credential. By crafting a workflow that omits a node's default parameters, a member can therefore save and run a workflow referencing a credential they have no permission to use, causing the decrypted credential value to be transmitted to an attacker-chosen destination. The flaw only constitutes a privilege boundary crossing in shared or multi-tenant deployments where unprivileged member accounts coexist with credentials they should not reach; single-user or fully-trusted-user installations have no exploitable boundary. The vendor vector is CVSS 4.0 base 5.1 while our independent assessment is CVSS 3.1 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N, treating impact as confidentiality-only (integrity and availability unaffected) with a scope change; the high attack complexity reflects the parameter-omission manipulation required, and the exact mechanics of how the check enumerates slots beyond what the advisory states are not described in the available sources.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:N
Authenticated member account needed (PR:L) and parameter-omission manipulation raises AC:H; crossing the credential-ownership boundary to exfiltrate decrypted secrets for other systems gives S:C and C:H, with no integrity or availability impact.
Primary rating from Vendor (vulncheck).
CVSS VectorVendor: vulncheck
Lifecycle Timeline
1DescriptionCVE.org
n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows member users to use credentials they cannot access by omitting default node parameters. Attackers can save and run workflows where pre-execution checks skip credential slots, causing decrypted credential values to be sent to attacker-chosen destinations.
Threat Intelligence Overview
NVD
CVE.org
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Exploit-DB