n8n vulnerabilities (Root)
54 vulnerabilities.
-
n8nRoot n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint 8.7 High -
n8nRoot n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution 8.7 High -
n8nRoot n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path 7.1 High -
n8nRoot n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node 7.1 High -
n8nRoot n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution 7.7 High -
n8nRoot n8n before 1.123.67 Prototype Pollution via Edit Fields 7.1 High -
n8nRoot n8n before 1.123.67 Arbitrary File Write via Edit Image Node 7.7 High -
n8nRoot n8n before 1.123.67 Credential Exfiltration via Sub-Workflow 7.2 High -
n8nRoot n8n before 1.123.67 Authentication Bypass via HTTP Request Node 7.1 High -
n8nRoot n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape 8.7 High -
n8nRoot n8n before 1.123.67 Arbitrary File Read via Send Email Node 8.2 High -
n8nRoot n8n before 1.123.67 Remote Code Execution via Git node 8.7 High -
n8nRoot n8n before 1.123.67 Path Traversal via Git Node Operations 7.1 High -
n8nRoot n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes 7.1 High -
n8nRoot n8n before 2.32.1 Authentication Bypass via Token Exchange 8.9 High -
n8nRoot n8n before 1.123.64 Remote Code Execution via Git Clone 8.9 High -
n8nRoot n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe 8.2 High -
n8nRoot n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange 8.9 High -
n8nRoot n8n before 1.123.64 Stored DOM XSS via cachedResultUrl 8.4 High -
n8nRoot n8n before 1.123.64 Sanitizer Bypass Remote Code Execution 8.9 High -
n8nRoot n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role 7.7 High -
n8nRoot n8n before 2.30.1 Privilege Escalation via run_node_tool 7.2 High -
n8nRoot n8n: Shared Credential Header Leak via HTTP Request Pagination Expression 7.1 High -
n8nRoot n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration 7.1 High -
n8nRoot n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution 7.6 High -
n8nRoot n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector 7.1 High -
n8nRoot n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints 5.3 Medium -
n8nRoot n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host 7.1 High -
n8nRoot n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions 8.8 High -
n8nRoot n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints 8.9 High -
n8nRoot n8n: Credential Exfiltration via Permission Bypass 8.5 High -
n8nRoot n8n: Denial of Service via ZIP decompression in webhook workflow 6.3 Medium -
n8nRoot n8n - Authorization Bypass in Public API Execution Retry Endpoint 5.3 Medium -
n8nRoot n8n - AST Validator Bypass in Python Code Node 5.3 Medium -
n8nRoot n8n: Stored XSS in Chat Trigger Node 7.0 High -
n8nRoot n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints 6.8 Medium -
n8nRoot n8n: Microsoft SQL Node Prototype Pollution 7.2 High -
n8nRoot n8n: Merge Node SQL Mode Prototype Pollution 6.0 Medium -
n8nRoot n8n: Prototype Pollution enables confused-deputy execution via public webhooks 6.3 Medium -
n8nRoot n8n: Same-Origin XSS in Respond to Webhook Node 7.0 High -
n8nRoot n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node 6.3 Medium -
n8nRoot n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint 5.3 Medium -
n8nRoot n8n: NoSQL Injection in MongoDB Node Find And Replace Operation 6.5 Medium -
n8nRoot n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes 6.5 Medium -
n8nRoot n8n: Git Node Clone and Push Operations Bypass File Sandbox 6.0 Medium -
n8nRoot n8n: Python sandbox escape 7.1 High -
n8nRoot n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint 5.3 Medium -
n8nRoot n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter 5.3 Medium -
n8nRoot n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints 8.3 High -
n8nRoot n8n: Source Control Pull SQL Injection 8.9 High - Show olderLoading…