CVE-2026-110850: n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters
n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field. An editor can configure a Message an Agent node in inline mode with tools they control to resolve the owner's credentials and send decrypted secrets to an attacker-chosen destination.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.41.4 - Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.42.1
Event History
Frequently Asked Questions
Who can exploit this issue?
An editor who can save a shared workflow can exploit it. The workflow must be owned by another user whose credentials the editor aims to resolve.
What configuration is required for exploitation?
The editor must configure a Message an Agent node in inline mode and use tools under their control. They can place credential IDs in agent node parameters, where they are not validated during the shared-workflow save check.
What versions need remediation?
n8n versions before 2.41.4 are affected, as are versions from 2.42.0 before 2.42.1. Updating to 2.41.4 or 2.42.1 addresses the affected version ranges.
What is the impact if exploitation succeeds?
The attacker can cause the owner's credentials to be resolved and send decrypted secrets to an attacker-chosen destination.