Leaked n8n API Tokens Exposed Live Instances to Credential Theft

The Hacker News 5 August 2026, 13:35 EEST Security

GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability. We scanned public GitHub commits for exposed n8n API tokens and identified 4,576 unique credentials associated with 1,255 hostnames. Of the 896…

Read the full story on The Hacker News https://thehackernews.com/2026/08/leaked-n8n-api-tokens-exposed-live.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Hospital operator Nutex Health says data stolen in cyberattack BleepingComputer
A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw The Hacker News
WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android The Hacker News
Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode The Hacker News