← CVE Radar
CVE-2026-59209n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with use-only editor access to a shared workflow could read credential-populated headers exposed via the $request object inside an HTTP Request node's pagination expression and exfiltrate the secret through item data. This issue is fixed in versions 1.123.61, 2.27.4, and 2.28.1.
7.1 HIGHEPSS 0.40%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.1 | HIGH | 4.0GitHub_M (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| 6.5 | MEDIUM | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Details
- CVE ID
- CVE-2026-59209
- Status
- Analyzed
- Assigner (CNA)
- GitHub_M
- Published
- Jul 9, 2026
- Last modified
- 2026-10-25 17:10 UTC
Affected Products
As published by the CNA in the CVE record.
n8n-ion8n3 version ranges
- >= 2.28.0, < 2.28.1
- >= 2.0.0-rc.0, < 2.27.4
- < 1.123.61