{"id":"CVE-2026-86993","title":"n8n is an open source workflow automation platform","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership chec…","severity":"medium","cvss":4.9,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-862"],"vendor":"n8n","product":"n8n","affected":["n8n < 1.123.76","n8n >= 2.0.0, < 2.37.7","n8n >= 2.38.0, < 2.38.2"],"patched":["n8n 2.38.2"],"published":"2026-09-08","updated":"2026-09-10","sourceUpdated":"2026-09-10T21:02:49.697","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86993","references":[{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-pq6c-vh67-xpm3","label":"security-advisories@github.com"}],"tags":["nvd","cve.org"],"epss":0.00264,"epssPercentile":0.18542,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T15:49:56.590750Z"},"scores":{"nvd":4.9,"cna":5.9},"ingestedAt":"2026-09-08T22:12:31.039Z","slug":"CVE-2026-86993","body":"## Overview\n\nn8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming scopes could select a credential belonging to another project and send its decrypted secret to an attacker-controlled endpoint. The affected authorization boundary is packages/cli/src/modules/log-streaming.ee/destinations/destination-credentials-access.ts and the credential:read scope. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.\n\n## Affected\n\n- `n8n < 1.123.76`\n- `n8n >= 2.0.0, < 2.37.7`\n- `n8n >= 2.38.0, < 2.38.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `n8n 2.38.2`","depth":"sunlit","depthScore":27,"depthScoreParts":{"impact":27,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202158,"id":"CVE-2026-86993","ts":1789400064583,"field":"cvss","old":"5.9","new":"4.9"},{"seq":200885,"id":"CVE-2026-86993","ts":1789397618185,"field":"cvss","old":"4.9","new":"5.9"},{"seq":199578,"id":"CVE-2026-86993","ts":1789395553134,"field":"cvss","old":"5.9","new":"4.9"},{"seq":198823,"id":"CVE-2026-86993","ts":1789392246362,"field":"cvss","old":"4.9","new":"5.9"},{"seq":197156,"id":"CVE-2026-86993","ts":1789384295642,"field":"cvss","old":"5.9","new":"4.9"},{"seq":196430,"id":"CVE-2026-86993","ts":1789383757665,"field":"cvss","old":"4.9","new":"5.9"},{"seq":195334,"id":"CVE-2026-86993","ts":1789380576394,"field":"cvss","old":"5.9","new":"4.9"},{"seq":194285,"id":"CVE-2026-86993","ts":1789378784833,"field":"cvss","old":"4.9","new":"5.9"},{"seq":193072,"id":"CVE-2026-86993","ts":1789376519541,"field":"cvss","old":"5.9","new":"4.9"},{"seq":191859,"id":"CVE-2026-86993","ts":1789373633082,"field":"cvss","old":"4.9","new":"5.9"},{"seq":190644,"id":"CVE-2026-86993","ts":1789369486016,"field":"cvss","old":"5.9","new":"4.9"},{"seq":189431,"id":"CVE-2026-86993","ts":1789368447885,"field":"cvss","old":"4.9","new":"5.9"},{"seq":188214,"id":"CVE-2026-86993","ts":1789365235518,"field":"cvss","old":"5.9","new":"4.9"},{"seq":187001,"id":"CVE-2026-86993","ts":1789363472922,"field":"cvss","old":"4.9","new":"5.9"},{"seq":185787,"id":"CVE-2026-86993","ts":1789361234152,"field":"cvss","old":"5.9","new":"4.9"},{"seq":184574,"id":"CVE-2026-86993","ts":1789358365629,"field":"cvss","old":"4.9","new":"5.9"},{"seq":182824,"id":"CVE-2026-86993","ts":1789354321843,"field":"cvss","old":"5.9","new":"4.9"},{"seq":181617,"id":"CVE-2026-86993","ts":1789353322541,"field":"cvss","old":"4.9","new":"5.9"},{"seq":180410,"id":"CVE-2026-86993","ts":1789350289466,"field":"cvss","old":"5.9","new":"4.9"},{"seq":179203,"id":"CVE-2026-86993","ts":1789348294568,"field":"cvss","old":"4.9","new":"5.9"},{"seq":177996,"id":"CVE-2026-86993","ts":1789346376530,"field":"cvss","old":"5.9","new":"4.9"},{"seq":176789,"id":"CVE-2026-86993","ts":1789343186243,"field":"cvss","old":"4.9","new":"5.9"},{"seq":174906,"id":"CVE-2026-86993","ts":1789334883003,"field":"cvss","old":"5.9","new":"4.9"},{"seq":173701,"id":"CVE-2026-86993","ts":1789333702444,"field":"cvss","old":"4.9","new":"5.9"},{"seq":172515,"id":"CVE-2026-86993","ts":1789331095509,"field":"cvss","old":"5.9","new":"4.9"},{"seq":171329,"id":"CVE-2026-86993","ts":1789328782527,"field":"cvss","old":"4.9","new":"5.9"},{"seq":170124,"id":"CVE-2026-86993","ts":1789327203191,"field":"cvss","old":"5.9","new":"4.9"},{"seq":168919,"id":"CVE-2026-86993","ts":1789323842326,"field":"cvss","old":"4.9","new":"5.9"},{"seq":167714,"id":"CVE-2026-86993","ts":1789319705669,"field":"cvss","old":"5.9","new":"4.9"},{"seq":166509,"id":"CVE-2026-86993","ts":1789318777822,"field":"cvss","old":"4.9","new":"5.9"},{"seq":165304,"id":"CVE-2026-86993","ts":1789315813310,"field":"cvss","old":"5.9","new":"4.9"},{"seq":164099,"id":"CVE-2026-86993","ts":1789313635945,"field":"cvss","old":"4.9","new":"5.9"},{"seq":162894,"id":"CVE-2026-86993","ts":1789311910482,"field":"cvss","old":"5.9","new":"4.9"},{"seq":161689,"id":"CVE-2026-86993","ts":1789308734817,"field":"cvss","old":"4.9","new":"5.9"},{"seq":159802,"id":"CVE-2026-86993","ts":1789300473062,"field":"cvss","old":"5.9","new":"4.9"},{"seq":158863,"id":"CVE-2026-86993","ts":1789299572247,"field":"cvss","old":"4.9","new":"5.9"},{"seq":157789,"id":"CVE-2026-86993","ts":1789296628995,"field":"cvss","old":"5.9","new":"4.9"},{"seq":156791,"id":"CVE-2026-86993","ts":1789294758448,"field":"cvss","old":"4.9","new":"5.9"},{"seq":155586,"id":"CVE-2026-86993","ts":1789292971649,"field":"cvss","old":"5.9","new":"4.9"},{"seq":154381,"id":"CVE-2026-86993","ts":1789289803104,"field":"cvss","old":"4.9","new":"5.9"},{"seq":151632,"id":"CVE-2026-86993","ts":1789277632241,"field":"cvss","old":"5.9","new":"4.9"},{"seq":150593,"id":"CVE-2026-86993","ts":1789276255717,"field":"cvss","old":"4.9","new":"5.9"},{"seq":149560,"id":"CVE-2026-86993","ts":1789273827643,"field":"cvss","old":"5.9","new":"4.9"},{"seq":148527,"id":"CVE-2026-86993","ts":1789271351684,"field":"cvss","old":"4.9","new":"5.9"},{"seq":146558,"id":"CVE-2026-86993","ts":1789269401154,"field":"cvss","old":"5.9","new":"4.9"},{"seq":145363,"id":"CVE-2026-86993","ts":1789266341893,"field":"cvss","old":"4.9","new":"5.9"},{"seq":144267,"id":"CVE-2026-86993","ts":1789262620347,"field":"cvss","old":"5.9","new":"4.9"},{"seq":143171,"id":"CVE-2026-86993","ts":1789261535890,"field":"cvss","old":"4.9","new":"5.9"},{"seq":142002,"id":"CVE-2026-86993","ts":1789258846599,"field":"cvss","old":"5.9","new":"4.9"},{"seq":140843,"id":"CVE-2026-86993","ts":1789256728746,"field":"cvss","old":"4.9","new":"5.9"}]}