Which versions of n8n are affected by CVE-2026-59209?

n8n workflow automation deployments are vulnerable to credential disclosure when workflows are shared with multiple editors; this allows insiders to extract authentication secrets for connected…. A patch is available.

How to fix or mitigate CVE-2026-59209?

Within 24 hours: identify n8n instances and catalog workflows with sensitive integrations, particularly those shared among multiple users. Within 7 days: upgrade all n8n deployments to patched versions (1.123.61 for 1.x, 2.27.4 or 2.28.1 for 2.x branches). Within 30 days: rotate credentials for any integrations used in shared workflows and implement stricter access controls limiting editor permissions to necessary workflows only.

n8n CVE-2026-59209

Q: What is the CVSS score of CVE-2026-59209?

CVE-2026-59209 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-42613 HIGH

Insufficiently Protected Credentials (CWE-522)

2026-07-09 GitHub_M

GHSA-q3j5-8vrg-4p9q

Information Disclosure N8n N8N Io

7.1

CVSS 4.0 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Network-reachable web app with an authenticated low-privileged shared-workflow member (PR:L), no user interaction, yielding credential disclosure so C:H and I/A:N.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 09, 2026 - 18:01 EUVD

Analysis Generated

Jul 09, 2026 - 17:03 vuln.today

DescriptionCVE.org

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with use-only editor access to a shared workflow could read credential-populated headers exposed via the $request object inside an HTTP Request node's pagination expression and exfiltrate the secret through item data. This issue is fixed in versions 1.123.61, 2.27.4, and 2.28.1.

AnalysisAI

Credential disclosure in n8n workflow automation (versions prior to 1.123.61, 2.27.4, and 2.28.1) allows an authenticated member holding use-only editor access to a shared workflow to read credential-populated HTTP headers via the $request object inside an HTTP Request node's pagination expression, then exfiltrate the secret through returned item data. This defeats n8n's credential-hiding model, which is supposed to prevent low-privilege collaborators from seeing the underlying secret values. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the EPSS/POC signals were not provided.

Technical ContextAI

n8n is an open-source, fair-code workflow automation platform where credentials (API keys, tokens, basic-auth values) are stored centrally and injected into nodes at execution time so that collaborators can use a credential without seeing its raw value. The HTTP Request node supports pagination via expressions that can reference a $request object representing the outgoing request, including its fully-resolved authentication headers. The root cause maps to CWE-522 (Insufficiently Protected Credentials): the pagination expression evaluation context exposes the credential-populated headers to a user who has only 'use' permission, allowing the secret to be copied into output item data where it becomes readable. The affected component is n8n-io:n8n (cpe:2.3:a:n8n-io:n8n:*).

RemediationAI

Vendor-released patch: upgrade to n8n 1.123.61, 2.27.4, or 2.28.1 depending on your release line, per advisory GHSA-q3j5-8vrg-4p9q (https://github.com/n8n-io/n8n/security/advisories/GHSA-q3j5-8vrg-4p9q); release notes are at https://github.com/n8n-io/n8n/releases/tag/n8n%402.27.4 and https://github.com/n8n-io/n8n/releases/tag/n8n%402.28.1. If immediate patching is not possible, compensating controls are to stop sharing workflows that contain sensitive HTTP Request credentials with use-only editors and instead restrict those workflows to fully trusted owners (trade-off: reduces collaboration), and to audit or disable HTTP Request nodes that use pagination expressions referencing $request on shared workflows (trade-off: breaks legitimate paginated API calls). Rotating any credentials that were exposed to untrusted shared-workflow members is also advisable since the flaw enables silent exfiltration.