{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/n8n--2.41.5-2.42.x--2.42.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.7,"id":"CVE-2026-118644"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["n8n (\u003c 2.41.5, 2.42.x \u003c 2.42.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eA vulnerability exists in n8n where a failed workflow's full execution context, including the identity of the user who started the run, is passed to the configured error workflow. A project editor can set a colleague's \u003ccode\u003esettings.errorWorkflow\u003c/code\u003e to an error workflow they own. When the colleague's workflow fails, the attacker can inherit the colleague's identity and resolve the colleague's per-user dynamic credential secrets. This affects n8n before 2.41.5 and 2.42.x before 2.42.2.\u003c/p\u003e\n","date_modified":"2026-10-28T20:38:29Z","date_published":"2026-10-28T20:38:29Z","id":"https://feed.craftedsignal.io/briefs/2026-10-n8n-privilege-escalation/","summary":"A vulnerability in n8n allows a project editor to intercept a colleague's failed workflow execution context and assume their identity to resolve per-user dynamic credential secrets.","title":"n8n: Unauthorized credential access via error workflow execution (CVE-2026-118644)","url":"https://feed.craftedsignal.io/briefs/2026-10-n8n-privilege-escalation/"}],"language":"en","title":"CraftedSignal Threat Feed - N8n (\u003c 2.41.5, 2.42.x \u003c 2.42.2)","version":"https://jsonfeed.org/version/1.1"}