Credential Guard Bypass Vulnerability in n8n Workflow Automation Tool

CVE-2026-118675

What is CVE-2026-118675?

The vulnerability in n8n before versions 1.123.85, 2.43.5, and 2.44.1 allows users with edit permissions on shared workflows to access restricted credentials. This is executed through the Execute Sub-workflow node, which can be manipulated to load sub-workflows from external URLs or local files. By leveraging this bypass, attackers can retrieve decrypted credential values, compromising sensitive data and potentially leading to unauthorized access within the system. It's critical for users to update their n8n installations to mitigate this security risk.

References