CVE-2026-118675

The software n8n versions before 1.123.85 , 2.43.5 , and 2.44.1 is vulnerable to a credential guard bypass (CWE-863). The root cause allows editors of shared workflows to access restricted credentials by configuring the Execute Sub-workflow node with a source url or localFile . This configuration...