Results for "Secret disclosure"

CVE-2026-42227: n8n Public API Variables IDOR Allows Cross-Project Secret Disclosure

An IDOR vulnerability in n8n’s public variables API allows authenticated users to read project variables outside their authorized scope, exposing secrets across…