---
id: CVE-2026-118644
title: >-
  n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context
  Inheritance
summary: >-
  n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full
  execution context, including the identity of the user who started the run, to
  the configured error workflow. A project editor can set a colleague's workflow
  setti…
severity: high
cvss: 7.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N'
cvssSource: cna
cwe:
  - CWE-266
vendor: n8n-io
product: n8n
affected:
  - n8n >= 2.42.0 < 2.42.2
  - n8n < 2.41.5
published: '2026-10-28'
updated: '2026-10-28'
sourceUpdated: '2026-10-28T18:59:44.266Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-118644'
references:
  - url: 'https://github.com/n8n-io/n8n/security/advisories/GHSA-pcr3-v5vr-qppf'
    label: GitHub Security Advisory (GHSA-pcr3-v5vr-qppf)
  - url: >-
      https://www.vulncheck.com/advisories/n8n-before-2.41.5-and-2.42.2-credential-theft-via-error-workflow-context-inheritance
    label: >-
      VulnCheck Advisory: n8n before 2.41.5 and 2.42.2 Credential Theft via
      Error-Workflow Context Inheritance
tags:
  - cve.org
epss: 0.00202
epssPercentile: 0.10134
ingestedAt: '2026-10-29T15:37:07.541Z'
---

## Overview

n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of the user who started the run, to the configured error workflow. A project editor can set a colleague's workflow settings.errorWorkflow to an error workflow they own, inherit the colleague's identity when that workflow fails, and resolve the colleague's per-user dynamic credential secrets.

## Affected

- `n8n >= 2.42.0 < 2.42.2`
- `n8n < 2.41.5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.