CVE-2026-126390 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
The n8n NocoDB node sends the configured NocoDB API token to any host named in an attachment URL when Download Attachments runs. An attacker with write access to a NocoDB attachment cell can capture that token by inserting a URL pointing to their own server.
first public Oct 28, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Self-hosted or cloud n8n instances before 1.123.89 that run workflows with the NocoDB node and Download Attachments enabled. The risk needs someone with write access to a NocoDB attachment cell, so teams where only trusted users edit NocoDB data have lower exposure.
Not affected if download-attachments-disabled, no-nocodb-node, version-1.123.89-or-later
Who cares n8n, nocodb, self-hosted
n8n --version; versions below 1.123.89 are affected.1.123.89 or later.n8n before 1.123.89 contains a credential leakage vulnerability in the NocoDB node that sends the configured NocoDB API token to attacker-chosen hosts when downloading attachments. Attackers with write access to a NocoDB attachment cell can insert a URL to their host, capturing the API token when the workflow executes with Download Attachments enabled.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.