Vulnerabilities / CVE-2026-118647

CVE-2026-118647

Published 2026-10-28 · Deferred

CVE-2026-118647

n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data

5.3 MEDIUM
CVSS 4.0 · CNA · vulncheck.com

0.3%
chance of exploitation in the next 30 days (EPSS; higher than 17% of CVEs)

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error execution data, because failed poll requests store raw request headers. Users who can view workflow executions but cannot read the credential can recover the token and access the connected SeaTable base.

Scores

5.3CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:NCNA · vulncheck.com

8.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:NCNA · vulncheck.com

Affected products

n8n-io n8n: < 1.123.85
n8n-io n8n: 2.44.0 to < 2.44.1
n8n-io n8n: 2.0.0 to < 2.43.5

Weakness: CWE-532

Also known as: GHSA-crfj-5wv6-8v86

2 references (advisories, patches, write-ups)

Sources: NVD, CVE.org, OSV.dev, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVE Check your dependencies Scan a website