N8
Product
n8n
On CISA KEVExploited in the wild
204
CVEs
1
On KEV
10.0
Max CVSS
45
New 30D
Severity mix
Critical 28High 97Medium 79Low 0
Watch
Add n8n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68613 In wildKEV | 8.8 | Dec 19 | n8n Vulnerable to Remote Code Execution via Expression Injection Affected: >= 0.211.0, < 1.120.4; = 1.121.0 |
| CVE-2026-54309 | 10.0 | Jun 23 | n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions Affected: >= 2.26.0, < 2.26.2; < 2.25.7 |
| CVE-2026-21858 | 10.0 | Jan 7 | n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling Affected: >= 1.65.0, < 1.121.0 |
| CVE-2026-85165 | 9.9 | Sep 3 | n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement Affected: before 2.36.2; before 2.35.4 |
| CVE-2026-72765 | 9.9 | Aug 11 | n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape Affected: before 2.32.1; before 2.31.5 |
| CVE-2026-44791 | 9.9 | Jun 23 | n8n: XML Node Prototype Pollution Patch Bypass Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1 |
| CVE-2026-44789 | 9.9 | Jun 23 | n8n: HTTP Request Node Pagination Prototype Pollution to RCE Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1 |
| CVE-2026-54305 | 9.9 | Jun 23 | n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2 |
| CVE-2026-54310 | 9.9 | Jun 23 | n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes Affected: >= 2.26.0, < 2.26.2; < 2.25.7 |
| CVE-2026-27577 | 9.9 | Feb 25 | n8n: Expression Sandbox Escape Leads to RCE Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1 |
| CVE-2026-27495 | 9.9 | Feb 25 | n8n has a Sandbox Escape in its JavaScript Task Runner Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1 |
| CVE-2026-27494 | 9.9 | Feb 25 | n8n has Arbitrary File Read via Python Code Node Sandbox Escape Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1 |
| CVE-2026-25115 | 9.9 | Feb 4 | n8n is vulnerable to Python sandbox escape Affected: < 2.4.8 |
| CVE-2026-25053 | 9.9 | Feb 4 | n8n is Vulnerable to OS Command Injection in Git Node Affected: < 1.123.10; < 2.5.0 |
| CVE-2026-25052 | 9.9 | Feb 4 | n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users Affected: < 1.123.18; < 2.5.0 |
| CVE-2026-25049 | 9.9 | Feb 4 | n8n Has an Expression Escape Vulnerability Leading to RCE Affected: < 1.123.17; < 2.5.2 |
| CVE-2026-21877 | 9.9 | Jan 8 | n8n is vulnerable to Remote Code Execution via Arbitrary File Write Affected: < 1.121.3 |
| CVE-2025-68668 | 9.9 | Dec 26 | n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node Affected: >= 1.0.0, < 2.0.0 |
| CVE-2026-77071 | 9.8 | Aug 20 | n8n before 1.123.69 PostgREST Filter Injection via Supabase Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77070 | 9.8 | Aug 20 | n8n before 1.123.69 NoSQL Injection via MongoDB Node Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-65590 | 9.8 | Jul 22 | n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows Affected: 2.30.0 before 2.30.1; before 2.29.8 |
| CVE-2026-42233 | 9.8 | May 4 | n8n: SQL Injection in Oracle Database Node via Limit Field Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |
| CVE-2026-54307 | 9.6 | Jun 23 | n8n: Credential Exfiltration via Permission Bypass Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2 |
| CVE-2026-42235 | 9.6 | May 4 | n8n: XSS via MCP OAuth client Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |
| CVE-2026-103255 | 9.0 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103248 | 9.0 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-44792 | 9.0 | Jun 23 | n8n: Source Control Pull SQL Injection Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1 |
| CVE-2026-33749 | 9.0 | Mar 25 | n8n Vulnerable to XSS via Binary Data Inline HTML Rendering Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0 |
| CVE-2026-27493 | 9.0 | Feb 25 | n8n has Unauthenticated Expression Evaluation via Form Node Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1 |
| CVE-2026-71539 | 8.9 | Aug 18 | n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution Affected: < 1.123.64; >= 2.0.0-rc.0, < 2.29.8; >= 2.30.0, < 2.30.1 |
| CVE-2026-86076 | 8.8 | Sep 8 | n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-86083 | 8.8 | Sep 8 | n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-85169 | 8.8 | Sep 3 | n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak Affected: before 1.123.73; before 2.36.2; before 2.35.4 |
| CVE-2026-85168 | 8.8 | Sep 3 | n8n before 1.123.73 Remote Code Execution via Git Node Affected: before 1.123.73; before 2.36.2; before 2.35.4 |
| CVE-2026-77084 | 8.8 | Aug 20 | n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77080 | 8.8 | Aug 20 | n8n before 1.123.69 Arbitrary File Read and Write via Snowflake Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77079 | 8.8 | Aug 20 | n8n before 2.34.1 Authorization Bypass via Custom Role Deletion Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77068 | 8.8 | Aug 20 | n8n before 2.34.1 Remote Code Execution via Path Traversal Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-72775 | 8.8 | Aug 11 | n8n before 1.123.67 SQL Injection via PostgresTrigger Node Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-72772 | 8.8 | Aug 11 | n8n before 2.32.1 Authentication Bypass via Token Exchange Affected: before 2.32.1; before 2.31.5 |
| CVE-2026-72767 | 8.8 | Aug 11 | n8n before 1.123.67 Remote Code Execution via Git node Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-72764 | 8.8 | Aug 11 | n8n before 1.123.67 Module Cache Poisoning via Code Node Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-72762 | 8.8 | Aug 11 | n8n before 1.123.67 Arbitrary File Write via Edit Image Node Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-72750 | 8.8 | Aug 11 | n8n before 1.123.67 SQL Injection via executeQuery Operation Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-65595 | 8.8 | Jul 22 | n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange Affected: before 2.30.1; before 2.29.8 |
| CVE-2026-65591 | 8.8 | Jul 22 | n8n before 1.123.64 Sanitizer Bypass Remote Code Execution Affected: before 1.123.64; 2.30.0 before 2.30.1; 2.0.0-rc.0 before 2.29.8 |
| CVE-2026-65016 | 8.8 | Jul 22 | n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role Affected: before 1.123.64; 2.30.0 before 2.30.1; 2.0.0-rc.0 before 2.29.8 |
| CVE-2026-65015 | 8.8 | Jul 22 | n8n before 2.30.1 Privilege Escalation via run_node_tool Affected: 2.30.0 before 2.30.1; before 2.29.8 |
| CVE-2026-44790 | 8.8 | Jun 23 | n8n: Arbitrary File Read via Git Node Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1 |
| CVE-2026-42237 | 8.8 | May 4 | n8n: SQL Injection in Snowflake and MySQL Nodes Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |