N8
Product
n8n
On CISA KEVExploited in the wild
204
CVEs
1
On KEV
10.0
Max CVSS
45
New 30D
Severity mix
Critical 28High 97Medium 79Low 0
Watch
Add n8n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42234 | 8.8 | May 4 | n8n: Python Task Runner Sandbox Escape Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |
| CVE-2026-42232 | 8.8 | May 4 | n8n: XML Node Prototype Pollution to RCE Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |
| CVE-2026-42231 | 8.8 | May 4 | n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |
| CVE-2026-42229 | 8.8 | May 4 | n8n: SQL Injection in SeaTable Node Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |
| CVE-2026-33713 | 8.8 | Mar 25 | n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression Affected: < 1.123.26; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0 |
| CVE-2026-33696 | 8.8 | Mar 25 | n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0 |
| CVE-2026-33660 | 8.8 | Mar 25 | n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0 |
| CVE-2026-27498 | 8.8 | Feb 25 | n8n has Arbitrary Command Execution via File Write and Git Operations Affected: < 1.123.8; >= 2.0.0, < 2.2.0 |
| CVE-2026-27497 | 8.8 | Feb 25 | n8n has Potential Remote Code Execution via Merge Node Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1 |
| CVE-2026-25056 | 8.8 | Feb 4 | n8n Arbitrary File Write leading to RCE in n8n Merge Node Affected: < 1.118.0; < 2.4.0 |
| CVE-2025-65964 | 8.8 | Dec 8 | n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook Affected: >= 0.123.1, < 1.119.2 |
| CVE-2025-62726 | 8.8 | Oct 30 | n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook Affected: < 1.113.0 |
| CVE-2026-118645 New | 8.7 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-103253 | 8.7 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103247 | 8.5 | Oct 1 | n8n before 1.123.80 Credential Tampering via Duplicate Node IDs Affected: before 1.123.80 |
| CVE-2026-49444 | 8.5 | Jun 23 | n8n: Python sandbox escape Affected: < 1.123.48; >= 2.0.0-rc.0, < 2.21.8; >= 2.22.0, < 2.22.4 |
| CVE-2026-54312 | 8.5 | Jun 23 | n8n: Microsoft SQL Node Prototype Pollution Affected: < 2.24.0 |
| CVE-2026-118649 New | 8.3 | Oct 28 | n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables Affected: 2.44.0 before 2.44.1; before 2.43.5 |
| CVE-2026-72768 | 8.3 | Aug 11 | n8n before 2.32.1 SSRF Protection Bypass via MCP Client Affected: before 2.32.1; before 2.31.5 |
| CVE-2026-118647 New | 8.2 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-118643 New | 8.2 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-110843 | 8.2 | Oct 14 | n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-103250 | 8.1 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memory Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-72769 | 8.1 | Aug 11 | n8n before 1.123.67 Prototype Pollution via VM Expression Engine Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-65596 | 8.1 | Jul 22 | n8n before 1.123.64 Credential Exfiltration via GraphQL Node Affected: before 1.123.64; before 2.30.1; before 2.29.8 |
| CVE-2026-45732 | 8.1 | Jun 23 | n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1 |
| CVE-2026-25055 | 8.1 | Feb 4 | n8n Arbitrary File Write on Remote Systems via SSH Node Affected: < 1.123.12; < 2.4.0 |
| CVE-2026-118644 New | 7.7 | Oct 28 | n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance Affected: 2.42.0 before 2.42.2; before 2.41.5 |
| CVE-2026-110845 | 7.7 | Oct 14 | n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110842 | 7.7 | Oct 14 | n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-103257 | 7.7 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103252 | 7.7 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103246 | 7.7 | Oct 1 | n8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool Introspection Affected: before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-72773 | 7.7 | Aug 11 | n8n before 2.32.1 Path Traversal via computer-use search_files Affected: before 2.32.1; before 2.31.5 |
| CVE-2026-49465 | 7.7 | Jun 23 | n8n: Git Node Clone and Push Operations Bypass File Sandbox Affected: < 1.123.48; >= 2.0.0-rc.0, < 2.21.8; >= 2.22.0, < 2.22.4 |
| CVE-2026-54304 | 7.7 | Jun 23 | n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host Affected: < 1.123.55; >= 2.26.0, < 2.26.1; >= 2.0.0-rc.0, < 2.25.7 |
| CVE-2026-54311 | 7.7 | Jun 23 | n8n: Merge Node SQL Mode Prototype Pollution Affected: >= 2.26.0, < 2.26.2; < 2.25.7 |
| CVE-2026-54313 | 7.7 | Jun 23 | n8n: NoSQL Injection in MongoDB Node Find And Replace Operation Affected: < 2.24.0 |
| CVE-2025-61917 | 7.7 | Feb 4 | n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner Affected: >= 1.65.0, < 1.114.3 |
| CVE-2026-103259 | 7.6 | Oct 1 | n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials Affected: before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103249 | 7.6 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-86073 | 7.6 | Sep 8 | n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution Affected: < 2.37.7; >= 2.38.0, < 2.38.1 |
| CVE-2026-77077 | 7.6 | Aug 20 | n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77072 | 7.6 | Aug 20 | n8n before 1.123.69 Stored XSS via Form Completion Page Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-118679 New | 7.5 | Oct 28 | n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger Affected: before 1.123.83; 2.42.0 before 2.42.1; 2.0.0 before 2.41.4 |
| CVE-2026-118641 New | 7.5 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-86075 | 7.5 | Sep 8 | n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint Affected: < 2.37.7; >= 2.38.0, < 2.38.2 |
| CVE-2026-72766 | 7.5 | Aug 11 | n8n before 1.123.67 Arbitrary File Read via Send Email Node Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-65598 | 7.5 | Jul 22 | n8n before 1.123.64 Remote Code Execution via Git Clone Affected: before 1.123.64; before 2.30.1; before 2.29.8 |
| CVE-2026-54314 | 7.5 | Jun 23 | n8n: Denial of Service via ZIP decompression in webhook workflow Affected: < 2.24.0 |