r8n Prototype Pollution via Workflow Credentials Leads to Unauthenticated Enumeration (CVE-2024-50206)

Vulnerability Overview Title: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration Description: An authenticated user with default permissions can pollute by saving, updating, importing, or importing workflows into the workflow API using a malicious workflow. This can be exploited to bypass authentication, allowing unauthorized requests to be treated as those of a privileged user and exposing endpoints such as user and project lists. Consequently, personal data for every account (email, role, MFA status) and all projects on the instance may be disclosed to unauthorized callers. Pollution can also corrupt global state, rendering the instance unavailable until it is restarted. Affected Versions Affected Versions: - = 1.123.61 - >= 2.28.1 - >= 2.27.4 CVSS v4 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Attack Requirements: None - Privileges Required: Low - User Interaction: None - Confidentiality: High - Integrity: High - Availability: None CVSS v4 Subsequent Metrics: - Confidentiality: Low - Integrity: Low - Availability: Low CVE ID: CVE-2024-50206 Remediation Patch: The issue has been fixed in r8n versions 1.123.61, 2.27.4, and 2.28.1. Users should upgrade to these versions or later to resolve the vulnerability. Temporary Mitigations: - Restrict workflow creation and editing permissions to fully trusted users. - Restrict network access to the r8n instance to trusted users. These temporary mitigations do not fully remediate the risk and should only be used as short-term measures. POC Code or Exploit Code No specific POC code or exploit code was provided in the source.

Goal Reached Thanks to every supporter — we hit 100%!

r8n Prototype Pollution via Workflow Credentials Leads to Unauthenticated Enumeration (CVE-2024-50206)

More from this source