Live › vulnerability › CVE-2026-118675
Go to dashboardn8n before 1.123.85, 2.43.5 and 2.44.1 lets editors of shared workflows use credentials they should not reach by loading sub-workflows from a URL or local file. An attacker who can edit a workflow can make the Execute Sub-workflow node return decrypted values of project credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 19:34 UTC. All times on this page are UTC.
Self-hosted or cloud n8n deployments where several people edit shared workflows that hold credentials for external services. Single-user instances, or teams where every editor is fully trusted, carry much less risk.
No product ranges from the sources yet.
n8n --version and compare against 1.123.85, 2.43.5 and 2.44.1url or localFile1.123.85, 2.43.5 or 2.44.1 depending on release lineEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared workflows to use restricted credentials by loading sub-workflows from URLs or local files. Attackers can configure the Execute Sub-workflow node with source url or localFile to serve content that resolves project credentials and returns their decrypted values.
This page as .md · .json · in your agent: get_signal("CVE-2026-118675")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.