{"data":{"id":"00d54b06-89bf-44d4-a6b1-269c238129b4","title":"GHSA-m63j-689w-3j35: n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition","summary":"An authenticated user with the global:member role can chain flaws in n8n's credential pipeline to steal plaintext secrets from generic HTTP credentials (httpBasicAuth, httpHeaderAuth, httpQueryAuth) owned by other users on the same instance. A name-based resolution path that does not enforce ownership or project scope, combined with a permission checker bypass that skips generic HTTP credential types during pre-execution validation, lets the attacker run a workflow that decrypts and uses another user's credential. Native integration credential types and Enterprise Edition are not affected.","solution":"The issue is fixed in n8n versions 1.123.27, 2.13.3, and 2.14.1; users should upgrade to one of these or later. If upgrading is not immediately possible, restrict instance access to fully trusted users only and audit stored credentials, rotating any generic HTTP credentials that may have been exposed. These workarounds do not fully remediate the risk and are short-term measures only.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-m63j-689w-3j35","publishedAt":"2026-03-25T21:08:33.000Z","cveId":"CVE-2026-33663","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.13.3 (fixed: 2.13.3)","n8n@= 2.14.0 (fixed: 2.14.1)","n8n@< 1.123.27 (fixed: 1.123.27)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00399,"epssCheckedAt":"2026-11-09T18:09:53.339Z","kevDateAdded":null,"advisoryAliases":["GHSA-m63j-689w-3j35"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-03-25T21:08:33.000Z","fixReleasedAt":"2026-03-25T11:34:50.925Z","daysToFix":0,"fixCheckedAt":"2026-10-29T21:39:36.649Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.27","matchedVersion":"1.123.27","fixReleasedAt":"2026-03-25T13:09:03.528Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:36.502Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.13.3","matchedVersion":"2.13.3","fixReleasedAt":"2026-03-25T11:40:17.687Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:36.502Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.14.1","matchedVersion":"2.14.1","fixReleasedAt":"2026-03-25T11:34:50.925Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:36.502Z"}]}}