CVE-2026-103247 in n8ninformazioni

Riassunto

di MITRE • 01/10/2026

n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to attacker-controlled hosts.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

VulnCheck

Prenotare

30/09/2026

Divulgazione

01/10/2026

Moderazione

accettato

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-103247
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-103247
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-103247/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!