{"data":{"id":"c45ab9e4-3849-4f85-b2c5-7a633e718524","title":"GHSA-2434-3x6q-8r99: n8n: External Secrets Accessible via Workflow Expressions Outside Credentials","summary":"A security flaw in n8n allowed authenticated users with editor access to read external secrets (sensitive configuration values stored outside the main system) through workflow node expressions (code blocks in automation workflows), even though they shouldn't have had permission to do so. This only affected n8n instances that had the external secrets feature enabled.","solution":"The issue has been fixed in n8n versions 2.27.4 and 2.28.1. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should restrict project membership to fully trusted users only and avoid granting editor access to projects on instances where external secrets are configured, though these workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-2434-3x6q-8r99","publishedAt":"2026-07-22T22:23:29.000Z","cveId":"CVE-2026-59254","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.27.4 (fixed: 2.27.4)","n8n@>= 2.28.0, < 2.28.1 (fixed: 2.28.1)"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00265,"patchAvailable":true,"disclosureDate":"2026-07-22T22:23:29.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.75,"researchCategory":null,"atlasIds":null}}