CVE-2026-65589
published 2026-07-22CVE-2026-65589: n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to…
PriorityP342medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.48%
39.4th percentile
n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in the database and can be exported.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| n8n-io | n8n | < 1.123.64 | 1.123.64 |
| n8n-io | n8n | < 2.30.1 | 2.30.1 |
| n8n-io | n8n | < 2.29.8 | 2.29.8 |
| n8n | n8n | < 1.123.64 | 1.123.64 |
| n8n | n8n | — | — |
| n8n | n8n | >= 0 < 1.123.64 | 1.123.64 |
| n8n | n8n | >= 2.0.0 < 2.29.8 | 2.29.8 |
| n8n | n8n | >= 2.0.0-rc.0 < 2.29.8 | 2.29.8 |
| n8n | n8n | >= 2.30.0 < 2.30.1 | 2.30.1 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv4.05.1MEDIUMCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
n8n-io n8n up to 1.123.61 LLM Sub-node missing encryption (EUVD-2026-47633)
vuldb·2026-07-23·CVSS 5.1
CVE-2026-65589 [MEDIUM] n8n-io n8n up to 1.123.61 LLM Sub-node missing encryption (EUVD-2026-47633)
A vulnerability labeled as problematic has been found in n8n-io n8n. Affected by this vulnerability is an unknown functionality of the component LLM Sub-node. Executing a manipulation can lead to missing encryption of sensitive data.
The identification of this vulnerability is CVE-2026-65589. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
GHSA
n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
ghsa·2026-07-22
CVE-2026-65589 [MEDIUM] CWE-532 n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
## Impact
Custom HTTP headers configured in credentials for certain LLM sub-nodes (including OpenAI, Anthropic, and Lemonade) are masked in the n8n UI but are written in plaintext into execution data during workflow runs. Any authenticated user with access to the execution data for an affected workflow can read the header names and values, which typically contain API keys or other secrets.
Because execution data can be persisted to the database and exported, leaked values may remain accessible beyond the lifetime of a single execution.
This issue only affects instances where workflows use LLM sub-nodes with custom headers defined in their credentials.
## Patches
The issue has been fixed in n8n version
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-22
Published