---
id: "CVE-2026-118676"
kind: "vulnerability"
aliases: ["CVE-2026-118676"]
title: "n8n: member users can run workflows with credentials they cannot access"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "credentials", "n8n", "self-hosted"]
not_affected_if: ["admin-only-workflows", "fixed-version"]
published_at: "2026-10-28T19:17:33+00:00"
first_seen_at: "2026-10-28T19:34:55+00:00"
updated_at: "2026-10-28T19:36:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118676", "first_seen_at": "2026-10-28T19:34:55+00:00"}]
---

# n8n: member users can run workflows with credentials they cannot access

n8n workflows can be saved so that pre-execution checks skip credential slots when default node parameters are omitted. A member user can thereby have decrypted credential values sent to destinations the attacker chooses.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed n8n version with `n8n --version` or the `n8n` package version in `package.json`; versions below `1.123.85`, `2.43.5` or `2.44.1` on their respective release lines are in scope.
- Review whether member-role users can create or run workflows in the instance.

## Fix

- Upgrade n8n to `1.123.85` on the 1.x line, `2.43.5` on the 2.43 line, or `2.44.1` on the 2.44 line.

## Timeline

- 2026-10-28T19:34:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118676

## From the sources

n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows member users to use credentials they cannot access by omitting default node parameters. Attackers can save and run workflows where pre-execution checks skip credential slots, causing decrypted credential values to be sent to attacker-chosen destinations.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_