CVE-2026-59254
MEDIUMn8n - External Secrets Disclosure via Workflow Node Expressions
Title source: cnaDescription
n8n before 2.28.1 contains an information disclosure vulnerability where external secrets are incorrectly resolved in workflow node expressions outside credentials scope. Authenticated project editors can read plaintext external secret values by referencing them in node expressions without requiring explicit secrets access permissions.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-2434-3x6q-8r99)
https://github.com/n8n-io/n8n/security/advisories/GHSA-2434-3x6q-8r99
Third Party Advisory third-party-advisory
VulnCheck Advisory: n8n - External Secrets Disclosure via Workflow Node Expressions
https://www.vulncheck.com/advisories/n8n-external-secrets-disclosure-via-workflow-node-expressions
Scores
CVSS v4
6.3
EPSS
0.0027
EPSS Percentile
18.4%
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-639
Status
published
Products (6)
n8n/n8n
< 2.27.4
n8n/n8n
< 2.28.1
n8n/n8n
2.27.4
n8n/n8n
2.28.1
npm/n8n
0 - 2.27.4npm
npm/n8n
2.28.0 - 2.28.1npm
Published
Jul 15, 2026
Tracked Since
Jul 15, 2026