CyberRota Analysis
AI-GeneratedVersions of n8n prior to 1.123.64, 2.29.8, and 2.30.1 are vulnerable due to a misconfiguration that exposes Google Service Account private keys in the JWT header's kid field. This credential exposure allows an attacker to recover the private key through logging or inspection, potentially leading to unauthorized access or modification of Google Cloud resources. Organizations utilizing n8n with Google Service Account credentials should prioritize updating to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field (intended only for a key identifier). Because JWT headers are Base64-encoded rather than encrypted, the private key could be recovered by anything that logged or inspected the JWT. An attacker who obtained the key could impersonate the service account and access or modify any Google Cloud resource it was authorized to use. Only instances using Google Service Account credentials are affected.
Related CVEs
Other vulnerabilities affecting the same vendor(s)