4 matches found
CVE-2026-72763
n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow when workflow sharing is enabled who knows a...
CVE-2026-72763
Affected software: n8n before 1.123.67, 2.31.5, and 2.32.1. The vulnerability arises because credential-access validation applies only to a node’s top-level credentials; credentials referenced inside an Execute Sub-workflow node’s inline JSON are not validated in the parent project context. As a ...
CVE-2026-72763 n8n before 1.123.67 Credential Exfiltration via Sub-Workflow
n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow when workflow sharing is enabled who knows a...
CVE-2026-72763 n8n before 1.123.67 Credential Exfiltration via Sub-Workflow
n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow when workflow sharing is enabled who knows a...