Skip to contentN8n-io vulnerabilities
Newest
- n8nn8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript ExecutionCVE-2026-86076Public exploitFix available8.7 High
- n8nn8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocketCVE-2026-86077Fix available6.3 Medium
- n8nn8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of ServiceCVE-2026-86078Fix available6.0 Medium
- n8nn8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded IdentifiersCVE-2026-86079Fix available6.3 Medium
- n8nn8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-OpenCVE-2026-86080Fix available6.3 Medium
- n8n-io n8nn8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone PathCVE-2026-86081Fix available7.1 High
- n8nn8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model NodeCVE-2026-86082Fix available7.1 High
- n8nn8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code ExecutionCVE-2026-86083Fix available7.7 High
- n8nn8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid SessionsCVE-2026-86084Fix available6.0 Medium
- n8nn8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment EndpointsCVE-2026-86085Fix available5.1 Medium
- n8nn8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership CheckCVE-2026-86993Fix available5.9 Medium
- n8nn8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId FilterCVE-2026-86994Fix available5.3 Medium
- n8nn8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository ReadCVE-2026-86995Fix available5.3 Medium
- n8nn8n: Agent Workflow Tool Bypasses Sub-Workflow Caller PolicyCVE-2026-86996Fix available5.3 Medium
- n8nn8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched ContentCVE-2026-86074Fix available5.9 Medium
- n8nn8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource SubstitutionCVE-2026-86073Fix available5.9 Medium
- n8nn8n before 2.36.2 Missing Authorization via Insights APICVE-2026-851735.3 Medium
- n8nn8n before 2.34.1 SSRF via Request Helper URI Validation BypassCVE-2026-851725.3 Medium
- n8nn8n before 1.123.73 Credential Exposure via Error LoggingCVE-2026-851717.1 High
- n8nn8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodesCVE-2026-851707.1 High
- n8nn8n before 1.123.73 Remote Code Execution via $fromAI Prototype LeakCVE-2026-851698.7 High
- n8nn8n before 1.123.73 Remote Code Execution via Git NodeCVE-2026-85168Public exploit7.7 High
- n8nn8n before 2.36.2 Query Injection via Elasticsearch Firestore NodesCVE-2026-851676.3 Medium
- n8nn8n before 2.36.2 Credential Exfiltration via Workflow Tool NodeCVE-2026-851667.2 High
- n8nn8n before 2.36.2 Expression Sandbox Bypass via SpreadElementCVE-2026-851657.2 High
- n8nn8n before 2.34.1 SSRF Protection Bypass via SearXNG ToolCVE-2026-770856.3 Medium
- n8nn8n before 1.123.69 Remote Code Execution via Git Node Configuration ValuesCVE-2026-770847.7 High
- n8nn8n before 1.123.69 Code Node Sandbox Escape via Function.prototype PollutionCVE-2026-770836.0 Medium
- n8nn8n before 1.123.69 ReDoS via Filter and Switch NodeCVE-2026-770825.3 Medium
- n8nn8n before 1.123.69 Allowed-Domains Bypass via GraphQL NodeCVE-2026-770815.1 Medium
- n8nn8n before 1.123.69 Arbitrary File Read and Write via SnowflakeCVE-2026-770808.7 High
- n8nn8n before 2.34.1 Authorization Bypass via Custom Role DeletionCVE-2026-770797.4 High
- n8nn8n before 1.123.69 Remote Code Execution via EventEmitter Prototype PollutionCVE-2026-770777.2 High
- n8nn8n before 1.123.69 Credential Leak via GraphQL Node ErrorCVE-2026-770767.1 High
- n8nn8n before 1.123.69 Expression Injection via Resource LocatorCVE-2026-770758.4 High
- n8nn8n before 1.123.69 SSRF via Edit Image NodeCVE-2026-770746.0 Medium
- n8nn8n before 2.34.1 Cross-Project Credential Access via MCPCVE-2026-770735.3 Medium
- n8nn8n before 1.123.69 Stored XSS via Form Completion PageCVE-2026-770728.4 High
- n8nn8n before 1.123.69 PostgREST Filter Injection via SupabaseCVE-2026-770717.1 High
- n8nn8n before 1.123.69 NoSQL Injection via MongoDB NodeCVE-2026-770707.1 High
- n8nn8n before 1.123.69 SSRF Protection Bypass via OAuth2CVE-2026-770692.3 Low
- n8nn8n before 2.34.1 Remote Code Execution via Path TraversalCVE-2026-770688.7 High
- n8nn8n before 1.123.67 SQL Injection via executeQuery OperationCVE-2026-72750Fix available5.3 Medium
- n8nn8n before 1.123.67 SQL Injection via PostgresTrigger NodeCVE-2026-72775Fix available5.8 Medium
- n8nn8n before 1.123.67 Module Cache Poisoning via Code NodeCVE-2026-72764Fix available5.8 Medium
- n8nn8n before 2.32.1 Path Traversal via computer-use search_filesCVE-2026-72773Fix available4.9 Medium
- n8nn8n before 1.123.67 Prototype Pollution via VM Expression EngineCVE-2026-72769Fix available6.1 Medium
- n8nn8n before 1.123.67 Prototype Pollution via Edit FieldsCVE-2026-72749Fix available7.1 High
- n8nn8n before 1.123.67 Arbitrary File Write via Edit Image NodeCVE-2026-72762Fix available7.7 High
- n8nn8n before 1.123.67 Credential Exfiltration via Sub-WorkflowCVE-2026-72763Fix available7.2 High
- Show moreLoading…