Résumé
Duplicate Advisory: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
Détails de l’avis
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-89gh-3pgc-v5h2. This link is maintained to preserve external references.
Original Description
n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in the database and can be exported.
Références
Vulnérabilités liées
Tout Supply chain →- HIGHCVE-2026-61798
netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages
- MEDIUMGHSA-hjwh-xvfw-qrwj
SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses
- HIGHGHSA-p77j-g7h5-r2vw
GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)
- MEDIUMCVE-2026-55102
hashi-vault-js: Vault token and secret values exposed in thrown errors
- MEDIUMCVE-2026-54704
OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
- MEDIUMCVE-2026-65589
n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data