{"id":"CVE-2026-119557","kind":"vulnerability","aliases":["CVE-2026-119557"],"related":[],"title":"n8n: Databricks node path traversal lets outsiders read stored secrets","description":"n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or form inputs mapped to spaceId, indexName, or filePath to read secrets using the stored credential.","summary":"n8n versions 2.14.0 through 2.46.3 have a path traversal flaw in the Databricks node that lets unauthenticated users reach arbitrary Databricks API endpoints. An attacker can use crafted webhook, chat or form input to read secrets using the stored Databricks credential.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","databricks","n8n","self-hosted","webhooks"],"not_affected_if":["auth-required","no-databricks-node","no-public-triggers"],"how_to_check":"- Check the n8n version with `n8n --version` or in the n8n UI settings and see whether it falls in 2.14.0 through 2.46.3.\n- Find workflows that use the Databricks node and that take input from webhook, chat or form triggers.","fix":"- Move n8n to a version later than `2.46.3`; the exact fixed version is unknown from the sources.","status":"open","published_at":"2026-10-30T12:16:42+00:00","first_seen_at":"2026-10-30T12:30:26+00:00","triaged_at":"2026-10-30T12:32:12+00:00","updated_at":"2026-10-30T12:32:12+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-10-30T12:32:12Z","model":"claude-haiku-5-5","output":{"fix":"- Move n8n to a version later than `2.46.3`; the exact fixed version is unknown from the sources.","reach":"internet","title":"n8n: Databricks node path traversal lets outsiders read stored secrets","impact":"high","summary":"n8n versions 2.14.0 through 2.46.3 have a path traversal flaw in the Databricks node that lets unauthenticated users reach arbitrary Databricks API endpoints. An attacker can use crafted webhook, chat or form input to read secrets using the stored Databricks credential.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["n8n","databricks","self-hosted","webhooks"],"confidence":0.7,"fix_status":"unknown","needs_auth":"no","worst_case":"attacker reads Databricks secrets using the stored credential","analyst_note":"Confirm the fixed n8n version and whether the flaw needs a Databricks node in a workflow exposed to a public trigger; check https://nvd.nist.gov/vuln/detail/CVE-2026-119557 and the n8n advisory.","how_to_check":"- Check the n8n version with `n8n --version` or in the n8n UI settings and see whether it falls in 2.14.0 through 2.46.3.\n- Find workflows that use the Databricks node and that take input from webhook, chat or form triggers.","plain_action":"","needs_analyst":true,"not_affected_if":["no-databricks-node","auth-required","no-public-triggers"],"who_is_affected":"Teams running self-hosted n8n in the 2.14.0 to 2.46.3 range that have workflows using the Databricks node fed by public webhook, chat or form inputs. Instances without Databricks nodes or without publicly reachable triggers are less exposed. The sources do not state more detail.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000746,"input_tokens":4170,"output_tokens":659,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-119557':13A,16A '-2026':12A,15A '2.14.0':28B,69C '2.46.3':30B,71C 'ai':18B 'ai-tool':17B 'allow':82C 'api':47B,89C 'arbitrari':45B,87C 'attack':50B,84C,96C 'chat':55B,105C 'contain':72C 'craft':53B 'credenti':66B,121C 'cve':11A,14A 'databrick':2A,20B,38B,46B,65B,79C,88C 'endpoint':48B,90C 'filepath':114C 'flaw':35B 'form':57B,107C 'host':24B 'identifi':95C 'indexnam':112C 'inject':92C 'input':58B,108C 'let':6A,41B 'map':109C 'n8n':1A,21B,26B,67C 'node':3A,39B,80C 'outsid':7A 'path':4A,33B,74C 'queri':101C 'reach':44B,86C 'read':8A,60B,116C 'resourc':94C 'secret':10A,61B,117C 'self':23B 'self-host':22B 'sequenc':99C 'spaceid':111C 'store':9A,64B,120C 'string':102C 'suppli':98C 'tool':19B 'travers':5A,34B,75C 'unauthent':42B,83C 'unencod':93C 'use':52B,62B,118C 'user':43B 'version':27B 'via':103C 'vulner':76C 'webhook':25B,54B,104C","nicknames":[],"mitigations":[],"who_affected":"Teams running self-hosted n8n in the 2.14.0 to 2.46.3 range that have workflows using the Databricks node fed by public webhook, chat or form inputs. Instances without Databricks nodes or without publicly reachable triggers are less exposed. The sources do not state more detail.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T12:16:42+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119557","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119557","severity":null,"published_at":"2026-10-30T12:16:42+00:00","modified_at":"2026-10-30T12:16:43+00:00","first_seen_at":"2026-10-30T12:30:26+00:00","fetched_at":"2026-10-30T12:30:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}