CyberRota Analysis
AI-GeneratedAuthenticated users with editor access in n8n versions prior to 1.123.61, 2.27.4, and 2.28.1 can exploit a vulnerability to read sensitive credential information from the $request object in HTTP Request nodes. This exposure allows for potential exfiltration of secrets through item data, posing a risk to workflow integrity and data confidentiality. Organizations using n8n should prioritize upgrading to the patched versions to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with use-only editor access to a shared workflow could read credential-populated headers exposed via the $request object inside an HTTP Request node's pagination expression and exfiltrate the secret through item data. This issue is fixed in versions 1.123.61, 2.27.4, and 2.28.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)