CVE-2026-110844: n8n 0 to before 1.123.83

Affected technology

n8n · 0 to before 1.123.83
n8n-io

Description’s affected range: before 1.123.83

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referencing restricted credentials, which execute using the workflow owner's credential values. Vendor/CNA’s CVSS 4.0 assessment (base score 7.2/10) rates confidentiality impact as high; integrity impact as low; availability impact as none.