Skip to contentN8n vulnerabilities
Newest
- n8nn8n is vulnerable to Python sandbox escapeCVE-2026-25115Fix available9.4 Critical
- n8nn8n Arbitrary File Write leading to RCE in n8n Merge NodeCVE-2026-25056Fix available9.4 Critical
- n8nn8n Arbitrary File Write on Remote Systems via SSH NodeCVE-2026-25055Fix available7.1 High
- n8nn8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UICVE-2026-25054Fix available8.5 High
- n8nn8n is Vulnerable to OS Command Injection in Git NodeCVE-2026-25053Public exploitFix available9.4 Critical
- n8nn8n Improper File Access Controls Allow Arbitrary File Read by Authenticated UsersCVE-2026-25052Fix available9.4 Critical
- n8nn8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSSCVE-2026-25051Fix available8.5 High
- n8nn8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task RunnerCVE-2025-61917Fix available7.7 High
- n8nn8n Has an Expression Escape Vulnerability Leading to RCECVE-2026-25049Public exploitFix available9.4 Critical
- n8nAuthenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.CVE-2026-1470Fix availableEPSS 20.4%9.9 Critical
- n8nSandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.CVE-2026-08638.5 High
- n8nn8n has a Webhook Node IP Whitelist Bypass via Partial String MatchingCVE-2025-68949Fix available5.3 Medium
- n8nn8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged WebhooksCVE-2026-21894Fix available6.5 Medium
- n8nn8n Vulnerable to Unauthenticated File Access via Improper Webhook Request HandlingCVE-2026-21858Public exploitFix availableEPSS 78.2%10.0 Critical
- n8nn8n is vulnerable to Remote Code Execution via Arbitrary File WriteCVE-2026-21877Public exploitFix available10.0 Critical
- n8nSelf-hosted n8n has Legacy Code node that enables arbitrary file read/writeCVE-2025-68697Fix available7.1 High
- n8nn8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code NodeCVE-2025-68668Fix availableEPSS 13.2%9.9 Critical
- n8nn8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe SandboxCVE-2025-61914Fix available7.3 High
- n8nn8n Vulnerable to Remote Code Execution via Expression InjectionCVE-2025-68613In KEVPublic exploitFix availableEPSS 99.0%10.0 Critical
- n8nn8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit HookCVE-2025-65964Public exploitFix available9.4 Critical
- n8nn8n Vulnerable to Remote Code Execution via Git Node Pre-Commit HookCVE-2025-62726Public exploitFix available8.8 High
- n8nn8n - Arbitrary Command Execution via Execute Command NodeCVE-2025-713808.7 High
- n8nn8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameterCVE-2025-58177Fix available5.4 Medium
- n8nN8N's Chat Trigger component is vulnerable to XSSCVE-2025-56265Fix available8.8 High
- n8nn8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted filesCVE-2025-57749Fix available6.5 Medium
- n8nStored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/sourceCVE-2025-52478Fix available8.7 High
- n8nn8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ WorkflowsCVE-2025-52554Fix available4.9 Medium
- n8nn8n Vulnerable to Denial of Service via Malformed Binary Data RequestsCVE-2025-49595Fix available4.9 Medium
- n8nn8n Login Flow has Open Redirect VulnerabilityCVE-2025-49592Fix available4.6 Medium
- n8nn8n Vulnerable to Stored XSS through Attachments View EndpointCVE-2025-46343Fix available5.0 Medium
- n8nn8n Information Disclosure vulnerabilityCVE-2023-27564Public exploitFix available7.5 High
- n8nn8n Privilege Escalation vulnerabilityCVE-2023-27563Fix available8.8 High
- n8nn8n Directory Traversal vulnerabilityCVE-2023-27562Fix available6.5 Medium