Information disclosure in N8n-io N8n

CVE-2026-54304

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authenticated user with permission to create or modify workflows and access to a SecurityScorecard credential with limited allowed domains could…

Vulnerability class: Information Disclosure

Affected products

  • N8n-io N8n — versions < 1.123.55, >= 2.26.0, < 2.26.1, >= 2.0.0-rc.0, < 2.25.7

Weakness classification (CWE)

References