{"data":{"id":"064cd458-6461-4ac8-885d-416dd69bad13","title":"GHSA-cj9h-qx8g-pq2g: n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON","summary":"n8n, a workflow automation tool, had a security flaw where someone with editor access to a shared workflow could steal credentials (login information) they weren't supposed to access by hiding them inside an Execute Sub-workflow node's inline JSON (a way to embed workflow code as data). The vulnerability only worked if workflow sharing was enabled and the attacker knew the credential's ID.","solution":"The issue has been fixed in n8n versions 1.123.67, 2.31.5, and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators can temporarily: restrict workflow sharing to trusted users only and avoid giving Editor access on workflows using sensitive credentials; audit shared workflows for Execute Sub-workflow nodes with Source = \"Parameter\" and review their inline workflow definitions for unexpected credential references; and restrict network egress from the n8n instance to prevent connections to attacker-controlled endpoints. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-cj9h-qx8g-pq2g","publishedAt":"2026-07-22T22:11:22.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)","n8n@< 1.123.67 (fixed: 1.123.67)"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":true,"disclosureDate":"2026-07-22T22:11:22.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}