Threats Tagged 'ghsa-6qc9-mqvw-jg7x'

An authorization bypass vulnerability exists in n8n's HTTP Request node where an authenticated user with edit access to a shared workflow can reference another user's credential by specifying the credential type via an expression. This bypasses ownership checks due to improper pre-execution validation, allowing unauthorized use or exfiltration of credentials if the attacker knows the credential identifier. The issue affects versions prior to 1.123.67 and versions from 2.32.0 up to but not including 2.32.1. Fixed versions are 1.123.67, 2.31.5, and 2.32.1 or later. Temporary mitigations include restricting access to trusted users, excluding the HTTP Request node if not needed, and auditing credential sharing. No known exploits in the wild have been reported.