THREAT OPS › Threat News › [NVD] CVE-2026-72774 (MEDIUM 6.5) — n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credential type via an expression. Because the p
[NVD] CVE-2026-72774 (MEDIUM 6.5) — n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credential type via an expression. Because the p
CVE-2026-72774 CVSS: 6.5 MEDIUM Published: 2026-08-11T13:19:07.893
n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credential type via an expression. Because the pre-execution permission check compares the unresolve
Indicators of compromise
- CVE-2026-72774cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-72774