CVE-2026-110853: n8n 0 to before 1.123.83

Affected technology

n8n · 0 to before 1.123.83
n8n-io

Description’s affected range: before 1.123.83

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Attackers can set this identifier to resolve credentials from projects they do not belong to and modify another workflow's static data and error-workflow dispatch. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity impact as low; availability impact as none.