---
id: "CVE-2026-119557"
kind: "vulnerability"
aliases: ["CVE-2026-119557"]
title: "n8n: Databricks node path traversal lets outsiders read stored secrets"
severity: "high"
cvss: 8.2
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "databricks", "n8n", "self-hosted", "webhooks"]
not_affected_if: ["auth-required", "no-databricks-node", "no-public-triggers"]
published_at: "2026-10-30T12:16:42+00:00"
first_seen_at: "2026-10-30T12:30:26+00:00"
updated_at: "2026-10-30T12:32:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119557", "first_seen_at": "2026-10-30T12:30:26+00:00"}]
---

# n8n: Databricks node path traversal lets outsiders read stored secrets

n8n versions 2.14.0 through 2.46.3 have a path traversal flaw in the Databricks node that lets unauthenticated users reach arbitrary Databricks API endpoints. An attacker can use crafted webhook, chat or form input to read secrets using the stored Databricks credential.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the n8n version with `n8n --version` or in the n8n UI settings and see whether it falls in 2.14.0 through 2.46.3.
- Find workflows that use the Databricks node and that take input from webhook, chat or form triggers.

## Fix

- Move n8n to a version later than `2.46.3`; the exact fixed version is unknown from the sources.

## Timeline

- 2026-10-30T12:30:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119557

## From the sources

n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or form inputs mapped to spaceId, indexName, or filePath to read secrets using the stored credential.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_