CVE-2026-110844

Deferred Deferred - Pending Action

Authorization Bypass in n8n Workflow Editor

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: VulnCheck

Description

n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referencing restricted credentials, which execute using the workflow owner's credential values.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110844

EUVD

EUVD-2026-101727

Affected Vendors & Products

Vendor	Product	Version / Range
n8n-io	n8n	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

n8n before 1.123.83 has an authorization bypass flaw. Shared-workflow editors can access credentials they normally cannot by embedding them in nested or inline sub-workflows. Attackers can save workflows with restricted credentials referenced in Workflow Tool or Workflow Retriever, which then execute using the owner's credential values.

Detection Guidance

Detecting this vulnerability requires checking for unauthorized credential usage in workflows. Inspect n8n workflows for embedded credentials in nested or inline sub-workflows. Look for Workflow Tool or Workflow Retriever definitions referencing credentials not explicitly shared with editors. Review workflow execution logs for unexpected credential access by shared editors.

Impact Analysis

If you use n8n versions before 1.123.83, attackers with shared-workflow editor access could gain unauthorized access to sensitive credentials. This could lead to data breaches, unauthorized actions, or exposure of confidential information.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or health data, violating GDPR and HIPAA compliance. Organizations may face legal penalties, loss of trust, and increased scrutiny due to data exposure.

Mitigation Strategies

Upgrade n8n to version 1.123.83 or later to address the authorization bypass vulnerability. Review workflows for embedded credentials in nested or tool inline sub-workflows and restrict shared-workflow editor permissions.

Hi! I’m here to help you understand CVE-2026-110844. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70