CVE-2026-118644 n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance

n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of the user who started the run, to the configured error workflow. A project editor can set a colleague's workflow settings.errorWorkflow to an error workflow they own, inherit the...

CVE-2026-118644

The n8n automation platform is vulnerable in versions before 2.41.5 and 2.42.x before 2.42.2 due to improper handling of workflow execution contexts. When a workflow fails, the system passes the full execution context—including the identity of the user who initiated the run—to the configured erro...

PT-2026-129142

n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of the user who started the run, to the configured error workflow. A project editor can set a colleague's workflow settings.errorWorkflow to an error workflow they own, inherit the...

EUVD-2026-101736

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...

PT-2026-114167

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...

PT-2026-114187

Name of the Vulnerable Software and Affected Versions Heym versions 0.0.55 through 0.0.120 Description A privilege escalation issue exists where shared collaborators can overwrite the error workflow id of a workflow. This occurs because the field is missing from OWNER ONLY EXECUTION FIELDS. An...