Information disclosure in N8n
CVE-2026-85171
n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck nodes. These nodes send their decrypted credentials to the authentication endpoint via the raw legacy HTTP helper outside any error handling, causing the plaintext secret to be persisted in execution error data. Any authenticated user can read the plaintext secret from their own execution through the REST API, bypassing the blank-value redaction enforced by the credentials API.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.006 (45.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 46th percentile — 45.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.006 · change: +0.002
Affected products
Weakness classification (CWE)
References
- github.com/n8n-io/n8n/security/advisories/GHSA-vrv8-j27g-g7cr (vendor-advisory, Mitigation, Vendor Advisory)
- www.vulncheck.com/advisories/n8n-before-1.123.73-credential-exposure-via-error-… (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2026-85171?
- CVE-2026-85171 is a medium-severity vulnerability in N8n, classified under Insertion of Sensitive Information into Log File. CVSS score: 6.5/10. Published 2026-09-03.
- How severe is CVE-2026-85171?
- Medium severity. CVSS v3 base score is 6.5 out of 10.