Threats Tagged 'ghsa-8342-988q-86cr'
View all threats tagged with 'ghsa-8342-988q-86cr'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-8342-988q-86cr'
Click on any threat for detailed analysis and mitigation recommendations
n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login 0 An account takeover vulnerability exists in n8n when the embed login feature is enabled and trusted key sources are configured. The service fails to verify that the email claim in a valid token is verified or that the token's permitted role ceiling covers the local account. This allows an attacker with a token accepted by a trusted key (e.g., from a trusted issuer emitting unverified emails) to authenticate as any user and gain full account control. The issue is fixed in n8n version 2.32.1. Temporary mitigations include disabling embed login or restricting network access and auditing trusted keys and token-exchange records. Join the discussion | GCVE Database | 07/22/2026, 22:04:54 UTC Added: 07/22/2026, 23:22:56 UTC |
Showing 1 to 1 of 1 result