Lucene search
+L

20 matches found

OSV
OSV
added 2026/07/22 10:10 p.m.8 views

GHSA-6QC9-MQVW-JG7X n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`

Impact An authenticated member with edit access to a shared workflow could reference another user's credential in an HTTP Request node while specifying the credential type through an expression. Because the pre-execution permission check compared the unresolved expression instead of the real...

7.1CVSS5.8AI score
SaveExploits0References6
Rows per page
Query Builder