High severity8.2NVD Advisory· Published Oct 28, 2026· Updated Oct 28, 2026

CVE-2026-118647

Description

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error execution data, because failed poll requests store raw request headers. Users who can view workflow executions but cannot read the credential can recover the token and access the connected SeaTable base.

Patches

Vulnerability mechanics

References

github.com/n8n-io/n8n/security/advisories/GHSA-crfj-5wv6-8v86nvd
www.vulncheck.com/advisories/n8n-before-1.123.85-2.43.5-and-2.44.1-seatable-trigger-api-token-exposure-via-execution-datanvd

News mentions

No linked articles in our index yet.