Evidence · DiggingBeagle record
n8n Slack Trigger signature configuration and file retrieval advisory
Advisory on optional Slack signing secret verification and the resulting message/file retrieval boundary.
- Published
- Oct 30, 2026
- Source role
- primary disclosure
Evidence record
Advisory on optional Slack signing secret verification and the resulting message/file retrieval boundary.
Claim-level citations (1)
- supportsn8n Slack Trigger could accept unsigned requests when a signing secret was not configured: The advisory describes an n8n Slack Trigger configuration in which absent request signing can allow forged events to reach credentialed workflow steps.
GitHub advisory, Slack signing-secret verification and OAuth-backed file handling