Dashboard / CVE-2026-85171

CVE-2026-85171

HIGH
MEDIUM Priority: 0.04 BB Relevance: 64/100
Published: 2026-09-03 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
AT: None
VC: High
VI: None
VA: None

Description

n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck nodes. These nodes send their decrypted credentials to the authentication endpoint via the raw legacy HTTP helper outside any error handling, causing the plaintext secret to be persisted in execution error data. Any authenticated user can read the plaintext secret from their own execution through the REST API, bypassing the blank-value redaction enforced by the credentials API.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
n8n n8n < 1.123.73
n8n-io n8n 0 < 1.123.73
n8n-io n8n 2.36.0 < 2.36.2
n8n-io n8n 2.0.0-rc.0 < 2.35.4
n8n-io n8n 0 < 1.123.73
n8n-io n8n 2.36.0 < 2.36.2
n8n-io n8n 2.0.0-rc.0 < 2.35.4

References & Advisories (2)

Bug Bounty Relevance

64 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.56%
Raw Score 0.005640
Percentile 46.8%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →

External Links