Auth bypass in N8n-io N8n

CVE-2026-72774

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credent…

Vulnerability class: IDOR (Insecure Direct Object Reference)

Affected products

N8n-io N8n — versions 0, 1.123.67, 2.32.1

Weakness classification (CWE)

CWE-639 — Authorization Bypass Through User-Controlled Key

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)