CVE-2026-103247
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs…
- Risk score
- 54/100
- CVSS
- 8.5 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 1 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to attacker-controlled host…
- Affected
- See advisory
- Fix
- Upgrade the product to 1.123.80 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 8.5 high
References
Original description
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to attacker-controlled hosts.
Last activity 1 Oct 2026. Patch Forecast updates every hour.