{"id":"CVE-2026-118676","kind":"vulnerability","aliases":["CVE-2026-118676"],"related":[],"title":"n8n: member users can run workflows with credentials they cannot access","description":"n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows member users to use credentials they cannot access by omitting default node parameters. Attackers can save and run workflows where pre-execution checks skip credential slots, causing decrypted credential values to be sent to attacker-chosen destinations.","summary":"n8n workflows can be saved so that pre-execution checks skip credential slots when default node parameters are omitted. A member user can thereby have decrypted credential values sent to destinations the attacker chooses.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","credentials","n8n","self-hosted"],"not_affected_if":["admin-only-workflows","fixed-version"],"how_to_check":"- Check the installed n8n version with `n8n --version` or the `n8n` package version in `package.json`; versions below `1.123.85`, `2.43.5` or `2.44.1` on their respective release lines are in scope.\n- Review whether member-role users can create or run workflows in the instance.","fix":"- Upgrade n8n to `1.123.85` on the 1.x line, `2.43.5` on the 2.43 line, or `2.44.1` on the 2.44 line.","status":"open","published_at":"2026-10-28T19:17:33+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","triaged_at":"2026-10-28T19:36:04+00:00","updated_at":"2026-10-28T19:36:04+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-10-28T19:36:04Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade n8n to `1.123.85` on the 1.x line, `2.43.5` on the 2.43 line, or `2.44.1` on the 2.44 line.","reach":"network","title":"n8n: member users can run workflows with credentials they cannot access","impact":"high","summary":"n8n workflows can be saved so that pre-execution checks skip credential slots when default node parameters are omitted. A member user can thereby have decrypted credential values sent to destinations the attacker chooses.","category":"ai-tooling","nicknames":[],"who_cares":["n8n","self-hosted","credentials"],"confidence":0.7,"needs_auth":"yes","worst_case":"Decrypted credentials are sent to attacker-chosen destinations, exposing API keys and secrets.","analyst_note":"Confirm the exact affected version ranges and whether a workaround exists beyond upgrading, using the NVD entry and n8n's release notes.","how_to_check":"- Check the installed n8n version with `n8n --version` or the `n8n` package version in `package.json`; versions below `1.123.85`, `2.43.5` or `2.44.1` on their respective release lines are in scope.\n- Review whether member-role users can create or run workflows in the instance.","needs_analyst":true,"not_affected_if":["admin-only-workflows","fixed-version"],"who_is_affected":"Self-hosted or cloud n8n instances where non-admin member users can create and execute workflows that use stored credentials. Instances where only trusted administrators can build workflows have a smaller exposure, but the fix is still the version upgrade.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000625,"input_tokens":3342,"output_tokens":582,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-118676':14A,17A '-2026':13A,16A '1.123.85':63C '2.43.5':64C '2.44.1':66C 'access':11A,81C 'ai':19B 'ai-tool':18B 'allow':73C 'attack':59B,87C,110C 'attacker-chosen':109C 'author':69C 'bypass':70C 'cannot':10A,80C 'caus':101C 'check':36B,97C 'choos':60B 'chosen':111C 'contain':67C 'credenti':8A,21B,38B,53B,78C,99C,103C 'cve':12A,15A 'decrypt':52B,102C 'default':41B,84C 'destin':57B,112C 'execut':35B,96C 'host':25B 'member':2A,47B,74C 'n8n':1A,22B,26B,61C 'node':42B,85C 'omit':45B,83C 'paramet':43B,86C 'pre':34B,95C 'pre-execut':33B,94C 'run':5A,91C 'save':30B,89C 'self':24B 'self-host':23B 'sent':55B,107C 'skip':37B,98C 'slot':39B,100C 'therebi':50B 'tool':20B 'use':77C 'user':3A,48B,75C 'valu':54B,104C 'vulner':71C 'workflow':6A,27B,92C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted or cloud n8n instances where non-admin member users can create and execute workflows that use stored credentials. Instances where only trusted administrators can build workflows have a smaller exposure, but the fix is still the version upgrade.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T19:17:33+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118676","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118676","severity":null,"published_at":"2026-10-28T19:17:33+00:00","modified_at":"2026-10-28T19:17:33+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","fetched_at":"2026-10-28T19:34:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}