Insertion of Sensitive Information into Log File

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the GraphQL node's error handling, which re-throws the underlying HTTP client error unchanged on a connection level failure rather than wrapping i...

CVE-2026-77076: Generation of Error Message Containing Sensitive Information

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. When a GraphQL request fails at the connection level, the node re-throws the underlying HTTP client error unchanged instead of wrapping it in n8n's standard error type. That error...