Authorization Bypass in n8n Workflow Automation Tool

CVE-2026-110844

What is CVE-2026-110844?

The n8n workflow automation tool before version 1.123.83 contains an authorization bypass vulnerability. This flaw permits shared-workflow editors to misuse credentials inaccessible to them by embedding those credentials within nested or tool inline sub-workflows. Malicious actors can exploit this vulnerability to save workflows with inline definitions that reference restricted credentials, which then execute using the credential values of the workflow owner, leading to unauthorized access and potential data compromise.

References