Skip to contentN8n-io vulnerabilities
Newest
- n8nn8n before 1.123.67 Authentication Bypass via HTTP Request NodeCVE-2026-72774Fix available7.1 High
- n8nn8n before 2.32.1 Remote Code Execution via Expression Sandbox EscapeCVE-2026-72765Fix available8.7 High
- n8nn8n before 1.123.67 Arbitrary File Read via Send Email NodeCVE-2026-72766Fix available8.2 High
- n8nn8n before 1.123.67 Remote Code Execution via Git nodeCVE-2026-72767Fix available8.7 High
- n8nn8n before 2.32.1 SSRF Protection Bypass via MCP ClientCVE-2026-72768Fix available6.4 Medium
- n8nn8n before 1.123.67 Path Traversal via Git Node OperationsCVE-2026-72770Fix available7.1 High
- n8nn8n before 2.32.1 Credential Restriction Bypass via AI/LLM NodesCVE-2026-72771Fix available7.1 High
- n8nn8n before 2.32.1 Authentication Bypass via Token ExchangeCVE-2026-72772Fix available8.9 High
- n8nn8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT HeaderCVE-2026-65599Fix available5.1 Medium
- n8n-io n8nn8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code ExecutionCVE-2026-715398.9 High
- n8nn8n before 1.123.64 Remote Code Execution via Git CloneCVE-2026-65598Fix available8.9 High
- n8nn8n before 1.123.64 DOM-Based XSS via Unsandboxed iframeCVE-2026-65597Fix available8.2 High
- n8nn8n before 1.123.64 Credential Exfiltration via GraphQL NodeCVE-2026-65596Fix available5.1 Medium
- n8nn8n before 2.29.8 and 2.30.1 Privilege Escalation via Token ExchangeCVE-2026-65595Fix available8.9 High
- n8nn8n before 2.30.1 Missing OAuth Authorization CheckCVE-2026-65594Fix available5.1 Medium
- n8nn8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node ParametersCVE-2026-65593Fix available6.3 Medium
- n8nn8n before 1.123.64 Stored DOM XSS via cachedResultUrlCVE-2026-65592Fix available8.4 High
- n8nn8n before 1.123.64 Sanitizer Bypass Remote Code ExecutionCVE-2026-65591Public exploitFix available8.9 High
- n8nn8n before 2.30.1 Shell Sandbox Bypass on Linux WindowsCVE-2026-65590Fix available5.5 Medium
- n8nn8n before 1.123.64 Credential Exposure via LLM Node Execution DataCVE-2026-65589Fix available5.1 Medium
- n8nn8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-RoleCVE-2026-65016Fix available7.7 High
- n8nn8n before 2.30.1 Privilege Escalation via run_node_toolCVE-2026-65015Fix available7.2 High
- n8nn8n before 2.28.0 Authentication Bypass via test-webhookCVE-2026-65014Fix available6.3 Medium
- n8nn8n - Permission Bypass via Expression Parser Mismatch in External SecretsCVE-2026-59259Fix available6.0 Medium
- n8nn8n - External Secrets Disclosure via Workflow Node ExpressionsCVE-2026-59254Fix available6.3 Medium
- n8nn8n - Disk Space Exhaustion via Data-Table File Upload EndpointCVE-2026-58661Fix available5.3 Medium
- n8nn8n: Shared Credential Header Leak via HTTP Request Pagination ExpressionCVE-2026-59209Fix available7.1 High
- n8nn8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project EnumerationCVE-2026-59206Fix available7.1 High
- n8nn8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity ResolutionCVE-2026-59208Fix available7.6 High
- n8nn8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP ConnectorCVE-2026-59207Fix available7.1 High
- n8nn8n - SQL Injection in MySQL v1 executeQuery Operation via Expression InterpolationCVE-2026-59257Fix available5.3 Medium
- n8nn8n - Improper Authorization in Workflow Assignment to FoldersCVE-2026-59253Fix available5.3 Medium
- n8nn8n - Incorrect OAuth Scope Validation in Evaluation Test Runs EndpointsCVE-2026-56775Fix available5.3 Medium
- n8nn8n: SecurityScorecard Node Leaks API Token to User-Controlled HostCVE-2026-54304Fix available7.1 High
- n8nn8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control SessionsCVE-2026-54309Fix available8.8 High
- n8nn8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE EndpointsCVE-2026-54305Fix available8.9 High
- n8nn8n: Credential Exfiltration via Permission BypassCVE-2026-54307Fix available8.5 High
- n8nn8n: Denial of Service via ZIP decompression in webhook workflowCVE-2026-54314Fix available6.3 Medium
- n8nn8n - Authorization Bypass in Public API Execution Retry EndpointCVE-2026-56778Fix available5.3 Medium
- n8nn8n - AST Validator Bypass in Python Code NodeCVE-2026-56777Fix available5.3 Medium
- n8nn8n: Stored XSS in Chat Trigger NodeCVE-2026-54302Fix available7.0 High
- n8nn8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification EndpointsCVE-2026-54303Fix available6.8 Medium
- n8nn8n: Microsoft SQL Node Prototype PollutionCVE-2026-54312Fix available7.2 High
- n8nn8n: Merge Node SQL Mode Prototype PollutionCVE-2026-54311Fix available6.0 Medium
- n8nn8n: Prototype Pollution enables confused-deputy execution via public webhooksCVE-2026-54306Fix available6.3 Medium
- n8nn8n: Same-Origin XSS in Respond to Webhook NodeCVE-2026-54301Fix available7.0 High
- n8nn8n: Missing Token Validation on Microsoft Agent 365 Trigger NodeCVE-2026-54308Fix available6.3 Medium
- n8nn8n - Incorrect OAuth Scope Validation in Workflow Test Run EndpointCVE-2026-56776Fix available5.3 Medium
- n8nn8n: NoSQL Injection in MongoDB Node Find And Replace OperationCVE-2026-54313Fix available6.5 Medium
- n8nn8n: SQL Injection in Postgres v1/TimesclaeDB NodesCVE-2026-54310Fix available6.5 Medium
- Show moreLoading…