CVE-2026-110850

7.2High

Published 14 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

7.2High

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: High impact on confidentiality
Weakness: CWE-863

Impact

Authenticated editors can steal the workflow owner's decrypted secrets and exfiltrate them to an external endpoint. The attacker needs an account with editor privileges on a shared workflow.

Root cause

The application checks credential authorization only in a node's top-level credentials field, ignoring credential IDs placed inside agent node parameters.

Affected systems

n8n before 2.41.4, and 2.42.0 before 2.42.1

CVSS v4.0 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Fix & remediation

Upgrade to n8n version 2.41.4, 2.42.1, or later. If you cannot patch immediately, restrict workflow sharing or downgrade untrusted editor accounts to prevent modifications to shared workflows.

shell

$ npm install -g n8n@latest

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field. An editor can configure a Message an Agent node in inline mode with tools they control to resolve the owner's credentials and send decrypted secrets to an attacker-chosen destination.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-110850