CVE-2026-59254Published
n8n before 2.28.1 contains an information disclosure vulnerability where external secrets are incorrectly resolved in workflow node expressions outside credentials scope. Authenticated project editors can read plaintext external secret valu…
Exact source revision recorded 25 Oct 2026 14:19:22 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-59254
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.