n8n before version 2.28.1 contains an information disclosure vulnerability where external secrets can be accessed via workflow node expressions outside the intended credentials scope. Authenticated project editors can read plaintext external secret values by referencing them in node expressions without needing explicit secrets access permissions. This advisory is a duplicate and has been withdrawn in favor of GHSA-2434-3x6q-8r99.