n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance

Summary

n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of the user who started the run, to the configured error workflow. A project editor can set a colleague's workflow settings.errorWorkflow to an error workflow they own, inherit the colleague's identity when that workflow fails, and resolve the colleague's per-user dynamic credential secrets.

Remediation

1. Inventory every n8n-io n8n deployment, including staging.
2. Upgrade n8n-io n8n to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Advisoryhttps://github.com/n8n-io/n8n/security/advisories/GHSA-pcr3-v5vr-qppf
• Advisoryhttps://www.vulncheck.com/advisories/n8n-before-2.41.5-and-2.42.2-credential-theft-via-error-workflow-context-inheritance