Threats tagged 'ghsa-qmh8-47xc-q5c6'

A vulnerability in n8n Local Gateway desktop app versions before 2.41.4 and 2.42.x before 2.42.1 allows an attacker to silently re-pair the app with a malicious n8n instance via a crafted deep-link. This can cause the app to connect to an attacker-controlled instance without user confirmation, inheriting previously granted permissions and enabling unauthorized actions through the gateway.