What is CVE-2026-72774?
CVE-2026-72774 is a credential authorization bypass vulnerability in the HTTP Request node of the n8n workflow automation platform. It allows an authenticated member with edit access to a shared workflow to reference another user's credential by specifying the credential type via an expression. Upgrade to versions 1.123.67, 2.31.5, or 2.32.1 to mitigate this issue.
Azərbaycanca: CVE-2026-72774, n8n iş axını avtomatlaşdırma platformasında HTTP Request node-da kreditensial avtorizasiya bypass zəifliyidir. Bu zəiflik, paylaşılan iş axınına redaktə girişi olan autentifikasiya olunmuş istifadəçinin, ifadə vasitəsilə credential type təyin edərək başqa istifadəçiyə məxsus kreditensialdan istifadə etməsinə imkan verir. Platformanı 1.123.67, 2.31.5 və ya 2.32.1 versiyalarına yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-284
FAQ2
What does CVE-2026-72774 allow an attacker to do in the n8n platform?
This vulnerability allows an authenticated member with edit access to a shared workflow to reference another user's credential by specifying the credential type via an expression.
Which n8n versions are recommended to mitigate CVE-2026-72774?
It is recommended to upgrade n8n to versions 1.123.67, 2.31.5, or 2.32.1.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.