Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/09/10 9:07 p.m.•20 views

n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check

Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and decrypted whichever credential it named without checking that the caller had access to it. A user holding a custom global role scoped to Log Streaming operations could therefore name...

5.9CVSS5.6AI score0.00459EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder