{"data":{"id":"6797d3b4-2524-4ad9-8c04-6d2c61887644","title":"GHSA-fxcw-h3qj-8m8p: n8n Has External Secrets Authorization Bypass in Credential Saving","summary":"n8n has an authorization bypass in credential saving that affects instances with an external secrets vault configured. An authenticated user lacking the externalSecret:list permission can reference a secret by its external name in a credential and retrieve the plaintext value on save, bypassing that check. The attacker must know or guess the target secret's name.","solution":"The issue has been fixed in n8n versions 1.123.23 and 2.6.4. Upgrade to one of these versions or later. If upgrading is not immediately possible, restrict n8n access to fully trusted users only and disable the external secrets integration until the patch can be applied. These workarounds do not fully remediate the risk and should only be used as short-term measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-fxcw-h3qj-8m8p","publishedAt":"2026-03-25T22:05:44.000Z","cveId":"CVE-2026-33722","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.6.4 (fixed: 2.6.4)","n8n@< 1.123.23 (fixed: 1.123.23)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00265,"epssCheckedAt":"2026-11-09T18:09:51.567Z","kevDateAdded":null,"advisoryAliases":["GHSA-fxcw-h3qj-8m8p"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-03-25T22:05:44.000Z","fixReleasedAt":"2026-02-06T12:41:49.837Z","daysToFix":-47,"fixCheckedAt":"2026-10-29T21:39:35.160Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.6.4","matchedVersion":"2.6.4","fixReleasedAt":"2026-02-06T12:41:49.837Z","daysToFix":-47,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:35.014Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.23","matchedVersion":"1.123.23","fixReleasedAt":"2026-02-26T05:53:19.050Z","daysToFix":-27,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:35.014Z"}]}}