n8n vulnerabilities (npm)
157 vulnerabilities.
-
n8nnpm n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint 8.7 High -
n8nnpm n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution 8.7 High -
n8nnpm n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket 6.3 Medium -
n8nnpm n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service 6.0 Medium -
n8nnpm n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers 6.3 Medium -
n8nnpm n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open 6.3 Medium -
n8nnpm n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path 7.1 High -
n8nnpm n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node 7.1 High -
n8nnpm n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution 7.7 High -
n8nnpm n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions 6.0 Medium -
n8nnpm n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints 5.1 Medium -
n8nnpm n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check 5.9 Medium -
n8nnpm n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter 5.3 Medium -
n8nnpm n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read 5.3 Medium -
n8nnpm n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy 5.3 Medium -
n8nnpm n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content 5.9 Medium -
n8nnpm n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution 5.9 Medium -
n8nnpm n8n before 1.123.67 SQL Injection via executeQuery Operation 5.3 Medium -
n8nnpm n8n before 1.123.67 SQL Injection via PostgresTrigger Node 5.8 Medium -
n8nnpm n8n before 1.123.67 Module Cache Poisoning via Code Node 5.8 Medium -
n8nnpm n8n before 2.32.1 Path Traversal via computer-use search_files 4.9 Medium -
n8nnpm n8n before 1.123.67 Prototype Pollution via VM Expression Engine 6.1 Medium -
n8nnpm n8n before 1.123.67 Prototype Pollution via Edit Fields 7.1 High -
n8nnpm n8n before 1.123.67 Arbitrary File Write via Edit Image Node 7.7 High -
n8nnpm n8n before 1.123.67 Credential Exfiltration via Sub-Workflow 7.2 High -
n8nnpm n8n before 1.123.67 Authentication Bypass via HTTP Request Node 7.1 High -
n8nnpm n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape 8.7 High -
n8nnpm n8n before 1.123.67 Arbitrary File Read via Send Email Node 8.2 High -
n8nnpm n8n before 1.123.67 Remote Code Execution via Git node 8.7 High -
n8nnpm n8n before 2.32.1 SSRF Protection Bypass via MCP Client 6.4 Medium -
n8nnpm n8n before 1.123.67 Path Traversal via Git Node Operations 7.1 High -
n8nnpm n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes 7.1 High -
n8nnpm n8n before 2.32.1 Authentication Bypass via Token Exchange 8.9 High -
n8nnpm n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header 5.1 Medium -
n8nnpm n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution 8.9 High -
n8nnpm n8n before 1.123.64 Remote Code Execution via Git Clone 8.9 High -
n8nnpm n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe 8.2 High -
n8nnpm n8n before 1.123.64 Credential Exfiltration via GraphQL Node 5.1 Medium -
n8nnpm n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange 8.9 High -
n8nnpm n8n before 2.30.1 Missing OAuth Authorization Check 5.1 Medium -
n8nnpm n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters 6.3 Medium -
n8nnpm n8n before 1.123.64 Stored DOM XSS via cachedResultUrl 8.4 High -
n8nnpm n8n before 1.123.64 Sanitizer Bypass Remote Code Execution 8.9 High -
n8nnpm n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows 5.5 Medium -
n8nnpm n8n before 1.123.64 Credential Exposure via LLM Node Execution Data 5.1 Medium -
n8nnpm n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role 7.7 High -
n8nnpm n8n before 2.30.1 Privilege Escalation via run_node_tool 7.2 High -
n8nnpm n8n before 2.28.0 Authentication Bypass via test-webhook 6.3 Medium -
n8nnpm n8n - Permission Bypass via Expression Parser Mismatch in External Secrets 6.0 Medium -
n8nnpm n8n - External Secrets Disclosure via Workflow Node Expressions 6.3 Medium - Show olderLoading…