Skip to contentN8n-io N8n vulnerabilities
- n8nn8n before 1.123.69 NoSQL Injection via MongoDB NodeCVE-2026-770707.1 High
- n8nn8n before 1.123.69 SSRF Protection Bypass via OAuth2CVE-2026-770692.3 Low
- n8nn8n before 2.34.1 Remote Code Execution via Path TraversalCVE-2026-770688.7 High
- n8nn8n before 1.123.67 SQL Injection via executeQuery OperationCVE-2026-72750Fix available5.3 Medium
- n8nn8n before 1.123.67 SQL Injection via PostgresTrigger NodeCVE-2026-72775Fix available5.8 Medium
- n8nn8n before 1.123.67 Module Cache Poisoning via Code NodeCVE-2026-72764Fix available5.8 Medium
- n8nn8n before 2.32.1 Path Traversal via computer-use search_filesCVE-2026-72773Fix available4.9 Medium
- n8nn8n before 1.123.67 Prototype Pollution via VM Expression EngineCVE-2026-72769Fix available6.1 Medium
- n8nn8n before 1.123.67 Prototype Pollution via Edit FieldsCVE-2026-72749Fix available7.1 High
- n8nn8n before 1.123.67 Arbitrary File Write via Edit Image NodeCVE-2026-72762Fix available7.7 High
- n8nn8n before 1.123.67 Credential Exfiltration via Sub-WorkflowCVE-2026-72763Fix available7.2 High
- n8nn8n before 1.123.67 Authentication Bypass via HTTP Request NodeCVE-2026-72774Fix available7.1 High
- n8nn8n before 2.32.1 Remote Code Execution via Expression Sandbox EscapeCVE-2026-72765Fix available8.7 High
- n8nn8n before 1.123.67 Arbitrary File Read via Send Email NodeCVE-2026-72766Fix available8.2 High
- n8nn8n before 1.123.67 Remote Code Execution via Git nodeCVE-2026-72767Fix available8.7 High
- n8nn8n before 2.32.1 SSRF Protection Bypass via MCP ClientCVE-2026-72768Fix available6.4 Medium
- n8nn8n before 1.123.67 Path Traversal via Git Node OperationsCVE-2026-72770Fix available7.1 High
- n8nn8n before 2.32.1 Credential Restriction Bypass via AI/LLM NodesCVE-2026-72771Fix available7.1 High
- n8nn8n before 2.32.1 Authentication Bypass via Token ExchangeCVE-2026-72772Fix available8.9 High
- n8nn8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT HeaderCVE-2026-65599Fix available5.1 Medium
- n8n-io n8nn8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code ExecutionCVE-2026-715398.9 High
- n8nn8n before 1.123.64 Remote Code Execution via Git CloneCVE-2026-65598Fix available8.9 High
- n8nn8n before 1.123.64 DOM-Based XSS via Unsandboxed iframeCVE-2026-65597Fix available8.2 High
- n8nn8n before 1.123.64 Credential Exfiltration via GraphQL NodeCVE-2026-65596Fix available5.1 Medium
- n8nn8n before 2.29.8 and 2.30.1 Privilege Escalation via Token ExchangeCVE-2026-65595Fix available8.9 High
- n8nn8n before 2.30.1 Missing OAuth Authorization CheckCVE-2026-65594Fix available5.1 Medium
- n8nn8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node ParametersCVE-2026-65593Fix available6.3 Medium
- n8nn8n before 1.123.64 Stored DOM XSS via cachedResultUrlCVE-2026-65592Fix available8.4 High
- n8nn8n before 1.123.64 Sanitizer Bypass Remote Code ExecutionCVE-2026-65591Public exploitFix available8.9 High
- n8nn8n before 2.30.1 Shell Sandbox Bypass on Linux WindowsCVE-2026-65590Fix available5.5 Medium
- n8nn8n before 1.123.64 Credential Exposure via LLM Node Execution DataCVE-2026-65589Fix available5.1 Medium
- n8nn8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-RoleCVE-2026-65016Fix available7.7 High
- n8nn8n before 2.30.1 Privilege Escalation via run_node_toolCVE-2026-65015Fix available7.2 High
- n8nn8n before 2.28.0 Authentication Bypass via test-webhookCVE-2026-65014Fix available6.3 Medium
- n8nn8n - Permission Bypass via Expression Parser Mismatch in External SecretsCVE-2026-59259Fix available6.0 Medium
- n8nn8n - External Secrets Disclosure via Workflow Node ExpressionsCVE-2026-59254Fix available6.3 Medium
- n8nn8n - Disk Space Exhaustion via Data-Table File Upload EndpointCVE-2026-58661Fix available5.3 Medium
- n8nn8n: Shared Credential Header Leak via HTTP Request Pagination ExpressionCVE-2026-59209Fix available7.1 High
- n8nn8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project EnumerationCVE-2026-59206Fix available7.1 High
- n8nn8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity ResolutionCVE-2026-59208Fix available7.6 High
- n8nn8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP ConnectorCVE-2026-59207Fix available7.1 High
- n8nn8n - SQL Injection in MySQL v1 executeQuery Operation via Expression InterpolationCVE-2026-59257Fix available5.3 Medium
- n8nn8n - Improper Authorization in Workflow Assignment to FoldersCVE-2026-59253Fix available5.3 Medium
- n8nn8n - Incorrect OAuth Scope Validation in Evaluation Test Runs EndpointsCVE-2026-56775Fix available5.3 Medium
- n8nn8n: SecurityScorecard Node Leaks API Token to User-Controlled HostCVE-2026-54304Fix available7.1 High
- n8nn8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control SessionsCVE-2026-54309Fix available8.8 High
- n8nn8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE EndpointsCVE-2026-54305Fix available8.9 High
- n8nn8n: Credential Exfiltration via Permission BypassCVE-2026-54307Fix available8.5 High
- n8nn8n: Denial of Service via ZIP decompression in webhook workflowCVE-2026-54314Fix available6.3 Medium
- n8nn8n - Authorization Bypass in Public API Execution Retry EndpointCVE-2026-56778Fix available5.3 Medium
- Show moreLoading…