CVE-2026-42226

n8n is an open source workflow automation platform. Prior to versions 1.123.33 and 2.17.5, the dynamic-node-parameters endpoints did not verify whether the authenticated caller was authorized to use a supplied credential reference. An authenticated user with access to a shared workflow could supply a foreign credential ID in the request body, causing the backend to decrypt and use that credential in a helper execution path where the caller also controls the destination URL. This allowed the caller to force the backend to authenticate against attacker-controlled infrastructure using a credential belonging to another user, effectively exfiltrating a reusable API key. The issue is not limited to any single node type; any node that resolves credentials dynamically through these endpoints may be affected. This issue has been patched in versions 1.123.33, 2.17.5, and 2.18.0.

• CWE-862

• https://github.com/n8n-io/n8n/security/advisories/GHSA-r4v6-9fqc-w5jrVendor Advisory

Published

May 4, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-42220Nginx UI is a web user interface for the Nginx web server. P…6.5
• CVE-2026-42221Nginx UI is a web user interface for the Nginx web server. F…9.8
• CVE-2026-42222Nginx UI is a web user interface for the Nginx web server. I…9.8
• CVE-2026-42223Nginx UI is a web user interface for the Nginx web server. P…6.5
• CVE-2026-42224ipl/web is a set of common web components for php projects. …7.6
• CVE-2026-42225PJSIP is a free and open source multimedia communication lib…5.9
• CVE-2026-42227n8n is an open source workflow automation platform. Prior to…6.5
• CVE-2026-42228n8n is an open source workflow automation platform. Prior to…6.5
• CVE-2026-42229n8n is an open source workflow automation platform. Prior to…8.8
• CVE-2026-4223A vulnerability was identified in itsourcecode Payroll Manag…9.8
• CVE-2026-42230n8n is an open source workflow automation platform. Prior to…6.1
• CVE-2026-42231n8n is an open source workflow automation platform. Prior to…8.8