CVE-2026-103247

Summary

This vulnerability allows attackers with editor access to shared workflows to tamper with credentials by exploiting duplicate node IDs, leading to unauthorized access to sensitive information.

Exploitability

Exploitation requires editor access to shared workflows and the presence of duplicate node IDs. This makes it moderately exploitable.

Blast radius

If exploited, attackers can gain unauthorized access to sensitive credentials and redirect secrets to attacker-controlled hosts, potentially leading to significant data breaches.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to n8n version 1.123.80 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.