{"id":"CVE-2026-118643","kind":"vulnerability","aliases":["CVE-2026-118643"],"related":[],"title":"n8n: failed Git, MongoDB and GCS nodes leak credential secrets in execution data","description":"n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when operations fail in the Git, MongoDB Atlas Vector Store, and Google Cloud Storage nodes. Users who can view a workflow's executions but cannot read the credential can recover Git passwords or tokens, MongoDB database passwords, or Google access tokens from that data.","summary":"n8n stores credential secrets such as Git passwords and tokens, MongoDB database passwords, and Google access tokens inside execution error data when those nodes fail. A user who can view workflow executions but cannot read the credential can recover those secrets from the stored error data.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","ai-workflows","credentials","n8n","self-hosted"],"not_affected_if":["no-git-mongodb-gcs-nodes","patched-version","single-trusted-user"],"how_to_check":"- Run `n8n --version` and compare against the fixed versions below.\n- Check whether any workflow uses the Git, MongoDB Atlas Vector Store or Google Cloud Storage nodes.\n- Review which users can view executions in the n8n UI and whether they lack access to the credentials those workflows use.","fix":"- Upgrade n8n 1.x to `1.123.85` or later.\n- Upgrade n8n 2.x to `2.43.5` or later, and 2.44.x to `2.44.1` or later.\n- Rotate Git tokens, MongoDB database passwords and Google access tokens used by affected workflows if executions were visible to unauthorized users.","status":"open","published_at":"2026-10-28T19:17:32+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","triaged_at":"2026-10-28T19:35:56+00:00","updated_at":"2026-10-28T19:35:56+00:00","category":"ai-tooling","confidence":0.8,"triage":{"at":"2026-10-28T19:35:56Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade n8n 1.x to `1.123.85` or later.\n- Upgrade n8n 2.x to `2.43.5` or later, and 2.44.x to `2.44.1` or later.\n- Rotate Git tokens, MongoDB database passwords and Google access tokens used by affected workflows if executions were visible to unauthorized users.","reach":"network","title":"n8n: failed Git, MongoDB and GCS nodes leak credential secrets in execution data","impact":"medium","summary":"n8n stores credential secrets such as Git passwords and tokens, MongoDB database passwords, and Google access tokens inside execution error data when those nodes fail. A user who can view workflow executions but cannot read the credential can recover those secrets from the stored error data.","category":"ai-tooling","nicknames":[],"who_cares":["n8n","self-hosted","ai-workflows","credentials"],"confidence":0.8,"needs_auth":"yes","worst_case":"Attackers with execution view access recover stored Git, MongoDB and Google credentials.","analyst_note":"","how_to_check":"- Run `n8n --version` and compare against the fixed versions below.\n- Check whether any workflow uses the Git, MongoDB Atlas Vector Store or Google Cloud Storage nodes.\n- Review which users can view executions in the n8n UI and whether they lack access to the credentials those workflows use.","needs_analyst":false,"not_affected_if":["no-git-mongodb-gcs-nodes","single-trusted-user","patched-version"],"who_is_affected":"Self-hosted or cloud n8n instances on versions before the fixed releases that run workflows using the Git, MongoDB Atlas Vector Store or Google Cloud Storage nodes. Exposure requires that some users can view executions without holding access to the underlying credentials. Instances with only one trusted admin or without these nodes are less exposed.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000682,"input_tokens":3373,"output_tokens":689,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-118643':16A,19A '-2026':15A,18A '1.123.85':79C '2':80C '2.43.5':83C '2.44':85C '2.44.1':88C 'access':46B,135C 'ai':21B,24B 'ai-tool':20B 'ai-workflow':23B 'atlas':103C 'cannot':64B,120C 'cloud':108C 'credenti':9A,26B,33B,67B,90C,123C 'cve':14A,17A 'data':13A,51B,76B,95C,139C 'databas':42B,131C 'error':50B,75B,94C 'execut':12A,49B,62B,93C,118C 'fail':2A,55B,98C 'gcs':6A 'git':3A,37B,101C,126C 'googl':45B,107C,134C 'host':30B 'insid':48B 'leak':8A 'mongodb':4A,41B,102C,130C 'n8n':1A,27B,31B,77C 'node':7A,54B,110C 'oper':97C 'password':38B,43B,127C,132C 'read':65B,121C 'recov':69B,125C 'secret':10A,34B,71B,91C 'self':29B 'self-host':28B 'storag':109C 'store':32B,74B,89C,105C 'token':40B,47B,129C,136C 'tool':22B 'user':57B,111C 'vector':104C 'view':60B,114C 'workflow':25B,61B,116C 'x':81C,86C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted or cloud n8n instances on versions before the fixed releases that run workflows using the Git, MongoDB Atlas Vector Store or Google Cloud Storage nodes. Exposure requires that some users can view executions without holding access to the underlying credentials. Instances with only one trusted admin or without these nodes are less exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T19:17:32+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118643","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118643","severity":null,"published_at":"2026-10-28T19:17:32+00:00","modified_at":"2026-10-28T19:17:32+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","fetched_at":"2026-10-28T19:34:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}