high7.7
CVE-2026-118644
n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of the user who started the run, to the co…
Impact
n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of the user who started the run, to the configured error workflow. A project editor can set a colleague's workflow settings.errorWorkflow to an error workflow they own, inherit the colleague's identity when that workflow fails, and resolve the colleague's per-user dynamic credential secrets.
Affected products
| Product | Affected versions |
|---|---|
| N8n | before 2.41.5 |
| 2.42.X | before 2.42.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.