All vulnerabilities

Servers and applications

GHSA-8vrr-mgc5-jg55

Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value

Severity
Medium 5.1
Published
14 Oct 2026
Last changed
14 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.123.85, 2.43.5, 2.44.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
n8nServers and applications · github:n8n-io/n8n
  • Every version before 1.123.85
  • Every version before 2.44.1
  • Every version before 2.43.5

References