Canadian Cyber Centre flags n8n flaw exposing other projects' data tables
Canada's Cyber Centre says n8n, a workflow automation tool, has a flaw that lets a crafted workflow ID reach data tables in other projects. Administrators should check their version.
Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.
The Canadian Centre for Cyber Security published advisory AV26-1103 on October 29, 2026, covering vulnerabilities in n8n. The advisory describes the issue as a crafted workflow ID that gives access to data tables in other projects. [1]
As of October 28, 2026, the Cyber Centre lists n8n versions before 2.44.1 and before 2.43.5 as affected. It urges users and administrators to read the linked vendor information and install updates when they are offered. [1]
Original sources
- [1]Canadian Centre for Cyber Security
n8n security advisory (AV26-1103)