CVE-2026-126388 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
n8n before 2.46.1 forwards Authorization headers and basic auth credentials when a request is redirected to a different origin, because the sendCredentialsOnCrossOriginRedirect setting defaults to true. An attacker who controls a redirect target or an expression-fed URL in a credential-using node can capture the stored workflow credentials.
first public Oct 28, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that self-host n8n or run it in their own cloud, especially where workflows call URLs built from user input or external data with stored credentials attached. Instances on hosted n8n that already run 2.46.1 or later are not exposed by this issue, and workflows that never follow redirects to other hosts are at lower risk.
Not affected if no-expression-fed-urls, version-2.46.1-or-later
Who cares ai-agents, n8n, self-hosted, workflow-automation
n8n --version or the image tag; versions below 2.46.1 are in range.sendCredentialsOnCrossOriginRedirect setting in the n8n environment or configuration and see whether it is still true.2.46.1 or later (per the sources' fixed version).n8n before 2.46.1 contains a credential exposure vulnerability that forwards Authorization headers and basic auth credentials on cross-origin redirects because sendCredentialsOnCrossOriginRedirect defaults to true. Attackers controlling a redirect target or an expression-fed URL in credential-using nodes can capture stored workflow credentials sent to their endpoint.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.