CVE-2026-110850

Deferred Deferred - Pending Action

Authentication Bypass in n8n Workflow Editor

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: VulnCheck

Description

n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field. An editor can configure a Message an Agent node in inline mode with tools they control to resolve the owner's credentials and send decrypted secrets to an attacker-chosen destination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110850

EUVD

EUVD-2026-101733

Affected Vendors & Products

Vendor	Product	Version / Range
n8n-io	n8n	0
n8n-io	n8n	2.42.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

n8n before 2.41.4 and 2.42.0 before 2.42.1 has a flaw where credential IDs stored in agent node parameters are not properly validated when a shared workflow is saved. An editor can exploit this by configuring a Message an Agent node with malicious tools to access the owner's credentials and send decrypted secrets to an attacker-controlled destination.

Detection Guidance

This vulnerability involves improper credential handling in n8n workflows. To detect it, inspect workflow files for Message an Agent nodes configured in inline mode with tools controlled by unauthorized users. Check for nodes with credential IDs that do not belong to the workflow owner. Review logs for unusual data exfiltration attempts or decrypted secrets being sent to external destinations.

Impact Analysis

This vulnerability allows an attacker with editor access to a shared workflow to steal sensitive credentials and secrets. If you use n8n in a collaborative environment, an insider threat or compromised editor could expose your system's credentials, leading to unauthorized access or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Organizations may face compliance penalties, reputational damage, and legal consequences if credentials are exposed due to this flaw.

Mitigation Strategies

Upgrade n8n to version 2.41.4 or later if using the 2.41.x branch, or to version 2.42.1 or later if using the 2.42.x branch to address the credential validation issue.

Hi! I’m here to help you understand CVE-2026-110850. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70