Vulnerability · Published Oct 14, 2026 · Assigned by VulnCheck

CVE-2026-110844n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows

High 7.2

In plain English

A high-severity incorrect authorization in n8n from n8n-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 4.0)7.2High

Exploit odds (30 days)0.3%top 79.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referencing restricted credentials, which execute using the workflow owner's credential values.

Affected products (as reported)

Vendor	Product	Versions
n8n-io	n8n	0 – before 1.123.83

Weakness: CWE-863 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N

References

GitHub Security Advisory (GHSA-r6g9-5cpp-ppwr) vendor-advisory
VulnCheck Advisory: n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows third-party-advisory