Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: n8n-io n8n 1.123.83 Clear all filters
TI-2026-74543 CVE-2026-110853

Authorization bypass in n8n Execute Sub-workflow inline JSON mode

Priority LOW 31

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00228 Published 2026-10-14 Fixed in 1.123.83 CWE-639
TI-2026-74534 CVE-2026-110844

Authorization bypass in n8n lets editors use restricted credentials

Priority LOW 31

n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00282 Published 2026-10-14 Fixed in 1.123.83 CWE-863