{"metadata": {"vulnerability": "CVE-2026-110850", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110850", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T22:16:22.734Z", "date_only": false, "value": "2026-10-14T22:16:22.734Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110850", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T22:52:26.290Z", "date_only": false, "value": "2026-10-14T22:52:26.290Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110850", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T22:52:26.290Z", "date_only": false, "value": "2026-10-14T22:52:26.290Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110850", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T23:17:25Z", "date_only": false, "value": "2026-10-14T23:17:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FV6M-3PMX-FCMP", "record": "GHSA-FV6M-3PMX-FCMP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T23:17:25.870Z", "date_only": false, "value": "2026-10-14T23:17:25.870", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110850", "record": "FKIE_CVE-2026-110850", "field": "published"}, {"timestamp": "2026-10-15T00:31:17Z", "date_only": false, "value": "2026-10-15T00:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FV6M-3PMX-FCMP", "record": "GHSA-FV6M-3PMX-FCMP", "field": "published"}, {"timestamp": "2026-10-15T00:31:18Z", "date_only": false, "value": "2026-10-15T00:31:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FV6M-3PMX-FCMP", "record": "GHSA-FV6M-3PMX-FCMP", "field": "modified"}, {"timestamp": "2026-10-15T01:10:04.054Z", "date_only": false, "value": "2026-10-15T01:10:04.054045Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117442255482035791", "record": "CVE-2026-110850", "field": "creation_timestamp", "uuid": "d116be2c-7956-4900-a2ba-0706be4c3929", "content": "CVE-2026-110850 n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field. An editor can configure a Message an Agent node in inline mode with tools they control to resolve the owner's credentials and send decrypted secrets to an attacker-chosen destination.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110850https://github.com/n8n-io/n8n/security/advisories/GHSA-x25p-9mr6-cwgphttps://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.1-credential-check-bypass-via-agent-node-parameters#n8n-io #n8n#CVE_2026_110850#bot", "url": "https://infosec.exchange/users/cve/statuses/117442255482035791"}, {"timestamp": "2026-10-15T18:13:56.480Z", "date_only": false, "value": "2026-10-15T18:13:56.480535Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110850", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T18:13:56.480Z", "date_only": false, "value": "2026-10-15T18:13:56.480535Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110850", "record": "FKIE_CVE-2026-110850", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T18:14:09.774Z", "date_only": false, "value": "2026-10-15T18:14:09.774Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110850", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:14:09.774Z", "date_only": false, "value": "2026-10-15T18:14:09.774Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110850", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T19:17:24.090Z", "date_only": false, "value": "2026-10-15T19:17:24.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110850", "record": "FKIE_CVE-2026-110850", "field": "lastModified"}]}