{"id":"CVE-2026-118647","kind":"vulnerability","aliases":["CVE-2026-118647"],"related":[],"title":"n8n: SeaTable Trigger token leaks into execution logs for viewers","description":"n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error execution data, because failed poll requests store raw request headers. Users who can view workflow executions but cannot read the credential can recover the token and access the connected SeaTable base.","summary":"n8n stores the SeaTable Trigger node's API token in error execution data, because failed poll requests save raw request headers. A user who can view workflow executions but cannot read the credential can recover the token and access the connected SeaTable base.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","n8n","seatable","self-hosted","workflow-automation"],"not_affected_if":["admin-only-executions","no-seatable-trigger"],"how_to_check":"- Run `n8n --version` (or check the image tag) and compare against `1.123.85`, `2.43.5` and `2.44.1`.\n- Look for workflows that use the SeaTable Trigger node and have failed executions.","fix":"- Upgrade n8n 1.x to `1.123.85` or later.\n- Upgrade n8n 2.x to `2.43.5` or later, and 2.44.x to `2.44.1` or later.\n- Rotate the SeaTable API token if non-owner users could view failed executions of SeaTable Trigger workflows.","status":"open","published_at":"2026-10-28T19:17:32+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","triaged_at":"2026-10-28T19:35:55+00:00","updated_at":"2026-10-28T19:35:55+00:00","category":"ai-tooling","confidence":0.8,"triage":{"at":"2026-10-28T19:35:55Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade n8n 1.x to `1.123.85` or later.\n- Upgrade n8n 2.x to `2.43.5` or later, and 2.44.x to `2.44.1` or later.\n- Rotate the SeaTable API token if non-owner users could view failed executions of SeaTable Trigger workflows.","reach":"network","title":"n8n: SeaTable Trigger token leaks into execution logs for viewers","impact":"medium","summary":"n8n stores the SeaTable Trigger node's API token in error execution data, because failed poll requests save raw request headers. A user who can view workflow executions but cannot read the credential can recover the token and access the connected SeaTable base.","category":"ai-tooling","nicknames":[],"who_cares":["n8n","self-hosted","seatable","workflow-automation"],"confidence":0.8,"needs_auth":"yes","worst_case":"SeaTable API token readable, granting access to the connected base","analyst_note":"","how_to_check":"- Run `n8n --version` (or check the image tag) and compare against `1.123.85`, `2.43.5` and `2.44.1`.\n- Look for workflows that use the SeaTable Trigger node and have failed executions.","needs_analyst":false,"not_affected_if":["no-seatable-trigger","admin-only-executions"],"who_is_affected":"Self-hosted or cloud n8n instances that run workflows with the SeaTable Trigger node. Exposure needs a user who can view workflow executions but cannot read the SeaTable credential. Instances with no SeaTable Trigger workflows, or where only trusted admins see executions, have less exposure.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000635,"input_tokens":3344,"output_tokens":601,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-118647':13A,16A '-2026':12A,15A '1.123.85':73C '2':74C '2.43.5':77C '2.44':79C '2.44.1':82C 'access':66B,119C 'ai':18B 'ai-tool':17B 'api':35B,89C 'autom':27B 'base':70B,123C 'cannot':57B,110C 'connect':68B,121C 'credenti':60B,113C 'cve':11A,14A 'data':40B,94C 'error':38B,92C 'execut':7A,39B,55B,93C,108C 'fail':42B,96C 'header':48B,102C 'host':24B 'leak':5A 'log':8A 'n8n':1A,20B,28B,71C 'node':33B,87C 'poll':43B,97C 'raw':46B,100C 'read':58B,111C 'recov':62B,115C 'request':44B,47B,98C,101C 'save':45B,83C 'seatabl':2A,21B,31B,69B,85C,122C 'self':23B 'self-host':22B 'store':29B,99C 'token':4A,36B,64B,90C,117C 'tool':19B 'trigger':3A,32B,86C 'user':50B,103C 'view':53B,106C 'viewer':10A 'workflow':26B,54B,107C 'workflow-autom':25B 'x':75C,80C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted or cloud n8n instances that run workflows with the SeaTable Trigger node. Exposure needs a user who can view workflow executions but cannot read the SeaTable credential. Instances with no SeaTable Trigger workflows, or where only trusted admins see executions, have less exposure.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T19:17:32+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118647","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118647","severity":null,"published_at":"2026-10-28T19:17:32+00:00","modified_at":"2026-10-28T19:17:33+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","fetched_at":"2026-10-28T19:34:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}