CyberRota Analysis
AI-GeneratedThe vulnerability affects n8n versions prior to 1.123.73, 2.35.4, and 2.36.2, specifically within the Strapi, SeaTable, and Mailcheck nodes, which improperly handle decrypted credentials. This flaw allows authenticated users to access plaintext secrets through execution error data via the REST API, undermining credential protection mechanisms. Organizations using n8n should prioritize remediation to mitigate the risk of credential exposure and potential unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck nodes. These nodes send their decrypted credentials to the authentication endpoint via the raw legacy HTTP helper outside any error handling, causing the plaintext secret to be persisted in execution error data. Any authenticated user can read the plaintext secret from their own execution through the REST API, bypassing the blank-value redaction enforced by the credentials API.
Related CVEs
Other vulnerabilities affecting the same vendor(s)