---
id: "CVE-2026-118647"
kind: "vulnerability"
aliases: ["CVE-2026-118647"]
title: "n8n: SeaTable Trigger token leaks into execution logs for viewers"
severity: "high"
cvss: 8.2
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "n8n", "seatable", "self-hosted", "workflow-automation"]
not_affected_if: ["admin-only-executions", "no-seatable-trigger"]
published_at: "2026-10-28T19:17:32+00:00"
first_seen_at: "2026-10-28T19:34:55+00:00"
updated_at: "2026-10-28T19:35:55+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118647", "first_seen_at": "2026-10-28T19:34:55+00:00"}]
---

# n8n: SeaTable Trigger token leaks into execution logs for viewers

n8n stores the SeaTable Trigger node's API token in error execution data, because failed poll requests save raw request headers. A user who can view workflow executions but cannot read the credential can recover the token and access the connected SeaTable base.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `n8n --version` (or check the image tag) and compare against `1.123.85`, `2.43.5` and `2.44.1`.
- Look for workflows that use the SeaTable Trigger node and have failed executions.

## Fix

- Upgrade n8n 1.x to `1.123.85` or later.
- Upgrade n8n 2.x to `2.43.5` or later, and 2.44.x to `2.44.1` or later.
- Rotate the SeaTable API token if non-owner users could view failed executions of SeaTable Trigger workflows.

## Timeline

- 2026-10-28T19:34:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118647

## From the sources

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error execution data, because failed poll requests store raw request headers. Users who can view workflow executions but cannot read the credential can recover the token and access the connected SeaTable base.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_