Skip to content
N8n vulnerabilities
Newest
-
n8n
n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
CVE-2026-86075
Fix available
8.7 High
-
n8n
n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution
CVE-2026-86076
Public exploitFix available
8.7 High
-
n8n
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
CVE-2026-86077
Fix available
6.3 Medium
-
n8n
n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
CVE-2026-86078
Fix available
6.0 Medium
-
n8n
n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
CVE-2026-86079
Fix available
6.3 Medium
-
n8n
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
CVE-2026-86080
Fix available
6.3 Medium
-
n8n
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
CVE-2026-86082
Fix available
7.1 High
-
n8n
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution
CVE-2026-86083
Fix available
7.7 High
-
n8n
n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
CVE-2026-86084
Fix available
6.0 Medium
-
n8n
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
CVE-2026-86085
Fix available
5.1 Medium
-
n8n
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
CVE-2026-86993
Fix available
5.9 Medium
-
n8n
n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
CVE-2026-86994
Fix available
5.3 Medium
-
n8n
n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
CVE-2026-86995
Fix available
5.3 Medium
-
n8n
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
CVE-2026-86996
Fix available
5.3 Medium
-
n8n
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
CVE-2026-86074
Fix available
5.9 Medium
-
n8n
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
CVE-2026-86073
Fix available
5.9 Medium
-
n8n
n8n before 2.36.2 Missing Authorization via Insights API
CVE-2026-85173
5.3 Medium
-
n8n
n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass
CVE-2026-85172
5.3 Medium
-
n8n
n8n before 1.123.73 Credential Exposure via Error Logging
CVE-2026-85171
7.1 High
-
n8n
n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes
CVE-2026-85170
7.1 High
-
n8n
n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak
CVE-2026-85169
8.7 High
-
n8n
n8n before 1.123.73 Remote Code Execution via Git Node
CVE-2026-85168
Public exploit
7.7 High
-
n8n
n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
CVE-2026-85167
6.3 Medium
-
n8n
n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node
CVE-2026-85166
7.2 High
-
n8n
n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement
CVE-2026-85165
7.2 High
-
n8n
n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool
CVE-2026-77085
6.3 Medium
-
n8n
n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values
CVE-2026-77084
7.7 High
-
n8n
n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution
CVE-2026-77083
6.0 Medium
-
n8n
n8n before 1.123.69 ReDoS via Filter and Switch Node
CVE-2026-77082
5.3 Medium
-
n8n
n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node
CVE-2026-77081
5.1 Medium
-
n8n
n8n before 1.123.69 Arbitrary File Read and Write via Snowflake
CVE-2026-77080
8.7 High
-
n8n
n8n before 2.34.1 Authorization Bypass via Custom Role Deletion
CVE-2026-77079
7.4 High
-
n8n
n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution
CVE-2026-77077
7.2 High
-
n8n
n8n before 1.123.69 Credential Leak via GraphQL Node Error
CVE-2026-77076
7.1 High
-
n8n
n8n before 1.123.69 Expression Injection via Resource Locator
CVE-2026-77075
8.4 High
-
n8n
n8n before 1.123.69 SSRF via Edit Image Node
CVE-2026-77074
6.0 Medium
-
n8n
n8n before 2.34.1 Cross-Project Credential Access via MCP
CVE-2026-77073
5.3 Medium
-
n8n
n8n before 1.123.69 Stored XSS via Form Completion Page
CVE-2026-77072
8.4 High
-
n8n
n8n before 1.123.69 PostgREST Filter Injection via Supabase
CVE-2026-77071
7.1 High
-
n8n
n8n before 1.123.69 NoSQL Injection via MongoDB Node
CVE-2026-77070
7.1 High
-
n8n
n8n before 1.123.69 SSRF Protection Bypass via OAuth2
CVE-2026-77069
2.3 Low
-
n8n
n8n before 2.34.1 Remote Code Execution via Path Traversal
CVE-2026-77068
8.7 High
-
n8n
n8n before 1.123.67 SQL Injection via executeQuery Operation
CVE-2026-72750
Fix available
5.3 Medium
-
n8n
n8n before 1.123.67 SQL Injection via PostgresTrigger Node
CVE-2026-72775
Fix available
5.8 Medium
-
n8n
n8n before 1.123.67 Module Cache Poisoning via Code Node
CVE-2026-72764
Fix available
5.8 Medium
-
n8n
n8n before 2.32.1 Path Traversal via computer-use search_files
CVE-2026-72773
Fix available
4.9 Medium
-
n8n
n8n before 1.123.67 Prototype Pollution via VM Expression Engine
CVE-2026-72769
Fix available
6.1 Medium
-
n8n
n8n before 1.123.67 Prototype Pollution via Edit Fields
CVE-2026-72749
Fix available
7.1 High
-
n8n
n8n before 1.123.67 Arbitrary File Write via Edit Image Node
CVE-2026-72762
Fix available
7.7 High
-
n8n
n8n before 1.123.67 Credential Exfiltration via Sub-Workflow
CVE-2026-72763
Fix available
7.2 High
- Show olderLoading…