Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/22 10:11 p.m.15 views

GHSA-CJ9H-QX8G-PQ2G n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON

Impact n8n's credential-access checks validated only a node's top-level credentials, not credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with editor access to a shared workflow could reference a credential they were not permitted to use inside that inli...

7.2CVSS5.5AI score0.00215EPSS
SaveExploits0References6
Rows per page
Query Builder