Prior to versions 2.41.4 of n8n and 2.42.1 of 2.42.0, the system does not verify that credential identifiers placed in agent node parameters belong to the owner when a workflow editor saves a shared workflow. This flaw allows an editor to configure a Message an Agent node in inline mode with tools they control and cause the workflow to resolve the owner’s credentials and expose the decrypted secrets to an attacker‑chosen destination. The exploit results in the unintended disclosure of confidential credential data, compromising the confidentiality of any secrets stored in the workflow’s environment.

The vulnerability affects the n8n workflow automation platform, version 2.41.x prior to 2.41.4 and version 2.42.x prior to 2.42.1. Any installation of these versions that permits shared workflows with agent nodes is at risk.

The CVSS score of 7.2 indicates moderate to high severity. Attackers must have editor privileges on a shared workflow to exploit this weakness, but once privileged, they can extract the owner’s credentials. Exploitability is considered high if an editor user exists, as no additional conditions are required. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, but the potential for credential leakage warrants immediate attention.