{"id":"EUVD-2026-38478","enisaUuid":"fed8c381-b5ce-37bb-9d37-7a04d806b310","description":"n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks were only enforced partially leading to cross-user credential access. This issue affects instances where workflow sharing is enabled and at least one workflow has been shared with a member-level user as an Editor. This vulnerability is fixed in 1.123.55, 2.25.7, and 2.26.2.","datePublished":"Jun 23, 2026, 3:47:25 PM","dateUpdated":"Jun 23, 2026, 5:03:12 PM","baseScore":8.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:L","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-pmqw-72cg-wx85\n","aliases":"CVE-2026-54307\nGHSA-pmqw-72cg-wx85\n","assigner":"GitHub_M","epss":0.39,"enisaIdProduct":[{"id":"09c95db7-9424-3dbf-8907-0d6592338190","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"\u003c 1.123.55"},{"id":"7ba1ac2d-4fa5-3c9c-b3bb-88e24442b5fd","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.26.0, \u003c 2.26.2"},{"id":"c3ce79d7-a37d-3b0e-a7f7-deb2a18425ff","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0, \u003c 2.25.7"}],"enisaIdVendor":[{"id":"eb29e9aa-f0e1-3143-93a0-083b84f54708","vendor":{"name":"n8n-io"}}],"enisaIdVulnerability":[{"id":"4500522a-8c53-3e97-9f38-ae51a9c58e31","vulnerability":{"id":"CVE-2026-54307","description":"n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks were only enforced partially leading to cross-user credential access. This issue affects instances where workflow sharing is enabled and at least one workflow has been shared with a member-level user as an Editor. This vulnerability is fixed in 1.123.55, 2.25.7, and 2.26.2.","datePublished":"Jun 23, 2026, 3:47:25 PM","dateUpdated":"Jun 23, 2026, 5:03:12 PM","status":"PUBLISHED","baseScore":8.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:L","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-pmqw-72cg-wx85\n","enisa_id":"EUVD-2026-38478\n","assigner":"GitHub_M","epss":0.39,"dataProcessed":"Oct 30, 2026, 7:16:47 AM","vulnerabilityProduct":[{"id":"64203496-72f8-3204-82f8-7647887d4417","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0, \u003c 2.25.7"},{"id":"80b1d9e0-d27e-32b0-ad81-5a618c42a880","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.26.0, \u003c 2.26.2"},{"id":"e22a325a-434d-327f-b9a5-82395dff2329","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"\u003c 1.123.55"}],"vulnerabilityVendor":[{"id":"1aeb501b-ef7f-3df1-88b1-d45d9ad91c97","vendor":{"name":"n8n-io"}}]}},{"id":"63beae8f-eb0c-38f2-b3c7-1d689f7bf4f3","vulnerability":{"id":"GHSA-pmqw-72cg-wx85","description":"n8n: Credential Exfiltration via Permission Bypass","datePublished":"Jun 16, 2026, 11:02:05 PM","dateUpdated":"Jul 8, 2026, 5:37:32 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-pmqw-72cg-wx85\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-54307\nhttps://github.com/n8n-io/n8n\n","enisa_id":"EUVD-2026-38478\n","aliases":"CVE-2026-54307\nGHSA-pmqw-72cg-wx85\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"cc45aa36-131a-3add-b706-c376b162ba56","advisory":{"id":"NCSC-2026-0212","description":"Kwetsbaarheden verholpen in n8n workflow automation platform","datePublished":"Jun 29, 2026, 8:02:42 AM","dateUpdated":"Jun 29, 2026, 8:02:42 AM","baseScore":0.0,"references":"","aliases":"CVE-2026-54301\nCVE-2026-54302\nCVE-2026-54304\nCVE-2026-54305\nCVE-2026-54306\nCVE-2026-54307\nCVE-2026-54308\nCVE-2026-54309\nCVE-2026-54310\nCVE-2026-54311\nCVE-2026-54312\nCVE-2026-54313\nCVE-2026-54314\nCVE-2026-54303\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"9b0181f2-7f6b-3f30-80cf-cc01cf736196","product":{"name":"n8n","vendor":{"name":"n8n-io"}}}]}}]}