CVE-2026-126388

EUVD-2026-125177
n8n before 2.46.1 contains a credential exposure vulnerability that forwards Authorization headers and basic auth credentials on cross-origin redirects because sendCredentialsOnCrossOriginRedirect defaults to true. Attackers controlling a redirect target or an expression-fed URL in credential-using nodes can capture stored workflow credentials sent to their endpoint.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 23.06%
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://github.com/n8n-io/n8n/security/advisories/GHSA-prmc-fg87-r4gh
https://www.vulncheck.com/advisories/n8n-before-2.46.1-credential-leak-via-cross-origin-redirects-in-nodes