CVE-2026-72763

Affected software: n8n before 1.123.67, 2.31.5, and 2.32.1. The vulnerability arises because credential-access validation applies only to a node’s top-level credentials; credentials referenced inside an Execute Sub-workflow node’s inline JSON are not validated in the parent project context. As a ...