Auth bypass in N8n-io N8n

CVE-2026-54307

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credentia…

Vulnerability class: Broken Access Control

Affected products

  • N8n-io N8n — versions < 1.123.55, >= 2.0.0-rc.0, < 2.25.7, >= 2.26.0, < 2.26.2

Weakness classification (CWE)

References