Skip to contentN8n-io N8n vulnerabilities
- n8nn8n - SSO Enforcement Bypass via APICVE-2026-56350Fix available6.0 Medium
- n8nn8n - Webhook Forgery via Missing HMAC-SHA256 Signature Verification in GitHub Webhook TriggerCVE-2026-56357Fix available6.3 Medium
- n8nn8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL NodesCVE-2026-56351Fix available5.3 Medium
- n8nn8n Vulnerable to Stored XSS via Various NodesCVE-2026-27578Fix available8.5 High
- n8nn8n: Expression Sandbox Escape Leads to RCECVE-2026-27577Public exploitFix availableEPSS 10.7%9.4 Critical
- n8nn8n has Arbitrary Command Execution via File Write and Git OperationsCVE-2026-27498Fix available9.0 Critical
- n8nn8n has Potential Remote Code Execution via Merge NodeCVE-2026-27497Fix available9.4 Critical
- n8nn8n has a Sandbox Escape in its JavaScript Task RunnerCVE-2026-27495Public exploitFix available9.4 Critical
- n8nn8n has Arbitrary File Read via Python Code Node Sandbox EscapeCVE-2026-27494Fix available7.1 High
- n8nn8n has Unauthenticated Expression Evaluation via Form NodeCVE-2026-27493Fix available9.5 Critical
- n8nDomain allowlist bypass enables credential exfiltrationCVE-2026-25631Fix available5.3 Medium
- n8nn8n Vulnerable to Command Injection in Community Package InstallationCVE-2026-21893Fix available9.4 Critical
- n8nn8n is vulnerable to Python sandbox escapeCVE-2026-25115Fix available9.4 Critical
- n8nn8n Arbitrary File Write leading to RCE in n8n Merge NodeCVE-2026-25056Fix available9.4 Critical
- n8nn8n Arbitrary File Write on Remote Systems via SSH NodeCVE-2026-25055Fix available7.1 High
- n8nn8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UICVE-2026-25054Fix available8.5 High
- n8nn8n is Vulnerable to OS Command Injection in Git NodeCVE-2026-25053Public exploitFix available9.4 Critical
- n8nn8n Improper File Access Controls Allow Arbitrary File Read by Authenticated UsersCVE-2026-25052Fix available9.4 Critical
- n8nn8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSSCVE-2026-25051Fix available8.5 High
- n8nn8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task RunnerCVE-2025-61917Fix available7.7 High
- n8nn8n Has an Expression Escape Vulnerability Leading to RCECVE-2026-25049Public exploitFix available9.4 Critical
- n8nn8n has a Webhook Node IP Whitelist Bypass via Partial String MatchingCVE-2025-68949Fix available5.3 Medium
- n8nn8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged WebhooksCVE-2026-21894Fix available6.5 Medium
- n8nn8n Vulnerable to Unauthenticated File Access via Improper Webhook Request HandlingCVE-2026-21858Public exploitFix availableEPSS 78.2%10.0 Critical
- n8nn8n is vulnerable to Remote Code Execution via Arbitrary File WriteCVE-2026-21877Public exploitFix available10.0 Critical
- n8nSelf-hosted n8n has Legacy Code node that enables arbitrary file read/writeCVE-2025-68697Fix available7.1 High
- n8nn8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code NodeCVE-2025-68668Fix availableEPSS 13.2%9.9 Critical
- n8nn8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe SandboxCVE-2025-61914Fix available7.3 High
- n8nn8n Vulnerable to Remote Code Execution via Expression InjectionCVE-2025-68613In KEVPublic exploitFix availableEPSS 99.0%10.0 Critical
- n8nn8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit HookCVE-2025-65964Public exploitFix available9.4 Critical
- n8nn8n Vulnerable to Remote Code Execution via Git Node Pre-Commit HookCVE-2025-62726Public exploitFix available8.8 High
- n8nn8n - Arbitrary Command Execution via Execute Command NodeCVE-2025-713808.7 High
- n8nn8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameterCVE-2025-58177Fix available5.4 Medium
- n8nn8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted filesCVE-2025-57749Fix available6.5 Medium
- n8nStored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/sourceCVE-2025-52478Fix available8.7 High
- n8nn8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ WorkflowsCVE-2025-52554Fix available4.9 Medium
- n8nn8n Vulnerable to Denial of Service via Malformed Binary Data RequestsCVE-2025-49595Fix available4.9 Medium
- n8nn8n Login Flow has Open Redirect VulnerabilityCVE-2025-49592Fix available4.6 Medium
- n8nn8n Vulnerable to Stored XSS through Attachments View EndpointCVE-2025-46343Fix available5.0 Medium