CVE-2026-118675: n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow
n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared workflows to use restricted credentials by loading sub-workflows from URLs or local files. Attackers can configure the Execute Sub-workflow node with source url or localFile to serve content that resolves project credentials and returns their decrypted values.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 1.123.85 - Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.43.5 - Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.44.1
Event History
Frequently Asked Questions
Who can exploit this issue?
An editor of a shared workflow can exploit it. The attacker needs the ability to configure an Execute Sub-workflow node in that shared workflow.
What configuration is required for exploitation?
The Execute Sub-workflow node must be configured to load a sub-workflow from a URL or a local file, using the source url or localFile option. The supplied content can resolve project credentials and return their decrypted values.
Which releases contain the fix?
The issue affects versions before 1.123.85, 2.43.5, and 2.44.1. Upgrade to the applicable fixed release for the version line in use.