Executive brief
n8n is a workflow automation platform that connects various applications and services. An authenticated user with access to shared workflows can steal API credentials belonging to other users by submitting requests with foreign credential IDs, causing the system to decrypt and transmit those credentials to attacker-controlled infrastructure. This allows attackers to gain reusable access tokens and potentially compromise downstream systems.
Technical details
The dynamic-node-parameters endpoints in n8n failed to verify that authenticated callers were authorized to reference supplied credential IDs. An authenticated attacker with workflow access could supply a foreign credential ID in the request body; the backend would decrypt the credential and use it in a helper execution where the attacker controls the destination URL, effectively exfiltrating the credential. The vulnerability affects any node type that dynamically resolves credentials through these endpoints. Attack vector is network-based and requires low-level privileges (any authenticated user) and no user interaction. The issue has been patched in versions 2.18.0, 2.17.5, and 1.123.33.
Affected products
- n8n n8n < 2.18.0, < 2.17.5, < 1.123.33 (multiple affected branches)
Timeline
- 2026-04-29: disclosed: Advisory published (GHSA-r4v6-9fqc-w5jr)
- 2026-04-22: patched: Patches available in versions 2.18.0, 2.17.5, and 1.123.33