Summary
generated automatically from NVD datan8n versions before 1.123.85, 2.43.5, and 2.44.1 have a credential guard bypass (CWE-863, incorrect authorization). An editor of a shared workflow can configure the Execute Sub-workflow node with a source of url or localFile, so the loaded content resolves project credentials and returns their decrypted values, giving access to credentials that should be restricted. The flaw is rated HIGH with a CVSS v3.1 score of 7.1.
NVD description
n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared workflows to use restricted credentials by loading sub-workflows from URLs or local files. Attackers can configure the Execute Sub-workflow node with source url or localFile to serve content that resolves project credentials and returns their decrypted values.
EPSS · FIRST.org
0.17%probability of exploitation in the next 30 days
Higher than 6% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-30, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 28 oct. 2026
- Updated
- 28 oct. 2026
- Status
- Deferred
- Source
- disclosure@vulncheck.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-863
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.