مستغلة: 178
الأحدثCVE-2026-115732 — تجاوز تفويض اسم الشهادة
VulnFeed.org
AREN
7.7
CVE-2026-118644يتوفر تصحيح

ثغرة عالية الخطورة في n8n-io n8n

n8n-io n8nقراءة 1 داقرأ بلغة

الملخص

n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of the user who started the run, to the configured error workflow. A project editor can set a colleague's workflow settings.errorWorkflow to an error workflow they own, inherit the colleague's identity when that workflow fails, and resolve the colleague's per-user dynamic credential secrets.

المعالجة

المراجع

Esc