N8
Product
n8n
On CISA KEVExploited in the wild
204
CVEs
1
On KEV
10.0
Max CVSS
45
New 30D
Severity mix
Critical 28High 97Medium 79Low 0
Watch
Add n8n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-110845 | 7.7 | Oct 14 | n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110842 | 7.7 | Oct 14 | n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-103257 | 7.7 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103252 | 7.7 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103246 | 7.7 | Oct 1 | n8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool Introspection Affected: before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-72773 | 7.7 | Aug 11 | n8n before 2.32.1 Path Traversal via computer-use search_files Affected: before 2.32.1; before 2.31.5 |
| CVE-2026-49465 | 7.7 | Jun 23 | n8n: Git Node Clone and Push Operations Bypass File Sandbox Affected: < 1.123.48; >= 2.0.0-rc.0, < 2.21.8; >= 2.22.0, < 2.22.4 |
| CVE-2026-54304 | 7.7 | Jun 23 | n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host Affected: < 1.123.55; >= 2.26.0, < 2.26.1; >= 2.0.0-rc.0, < 2.25.7 |
| CVE-2026-54311 | 7.7 | Jun 23 | n8n: Merge Node SQL Mode Prototype Pollution Affected: >= 2.26.0, < 2.26.2; < 2.25.7 |
| CVE-2026-54313 | 7.7 | Jun 23 | n8n: NoSQL Injection in MongoDB Node Find And Replace Operation Affected: < 2.24.0 |
| CVE-2025-61917 | 7.7 | Feb 4 | n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner Affected: >= 1.65.0, < 1.114.3 |
| CVE-2026-103259 | 7.6 | Oct 1 | n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials Affected: before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103249 | 7.6 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-86073 | 7.6 | Sep 8 | n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution Affected: < 2.37.7; >= 2.38.0, < 2.38.1 |
| CVE-2026-77077 | 7.6 | Aug 20 | n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77072 | 7.6 | Aug 20 | n8n before 1.123.69 Stored XSS via Form Completion Page Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-118679 New | 7.5 | Oct 28 | n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger Affected: before 1.123.83; 2.42.0 before 2.42.1; 2.0.0 before 2.41.4 |
| CVE-2026-118641 New | 7.5 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-86075 | 7.5 | Sep 8 | n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint Affected: < 2.37.7; >= 2.38.0, < 2.38.2 |
| CVE-2026-72766 | 7.5 | Aug 11 | n8n before 1.123.67 Arbitrary File Read via Send Email Node Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-65598 | 7.5 | Jul 22 | n8n before 1.123.64 Remote Code Execution via Git Clone Affected: before 1.123.64; before 2.30.1; before 2.29.8 |
| CVE-2026-54314 | 7.5 | Jun 23 | n8n: Denial of Service via ZIP decompression in webhook workflow Affected: < 2.24.0 |
| CVE-2026-42236 | 7.5 | May 4 | n8n: Unauthenticated Denial of Service via MCP Client Registration Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |
| CVE-2026-42226 | 7.5 | May 4 | n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay Affected: < 1.123.33; >= 2.17.0, < 2.17.5 |
| CVE-2026-33665 | 7.5 | Mar 25 | n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover Affected: < 1.121.0; >= 2.0.0-rc.0, < 2.4.0 |
| CVE-2026-33724 | 7.4 | Mar 25 | n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no Affected: < 2.5.0 |
| CVE-2026-118648 New | 7.3 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-77075 | 7.3 | Aug 20 | n8n before 1.123.69 Expression Injection via Resource Locator Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-110850 | 7.2 | Oct 14 | n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110849 | 7.2 | Oct 14 | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110844 | 7.2 | Oct 14 | n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows Affected: before 1.123.83 |
| CVE-2026-54308 | 7.2 | Jun 23 | n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node Affected: >= 2.26.0, < 2.26.2; < 2.25.7 |
| CVE-2026-21893 | 7.2 | Feb 4 | n8n Vulnerable to Command Injection in Community Package Installation Affected: >= 0.187.0, < 1.120.3 |
| CVE-2026-118678 New | 7.1 | Oct 28 | n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-118676 New | 7.1 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-118675 New | 7.1 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-118642 New | 7.1 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-110853 | 7.1 | Oct 14 | n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON Affected: before 1.123.83 |
| CVE-2026-103256 | 7.1 | Oct 1 | n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook Affected: before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103251 | 7.1 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-86081 | 7.1 | Sep 8 | n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-86074 | 7.1 | Sep 8 | n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content Affected: < 2.37.7; >= 2.38.0, < 2.38.2 |
| CVE-2026-77081 | 7.1 | Aug 20 | n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-59206 | 7.1 | Jul 9 | n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration Affected: >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4; < 1.123.61 |
| CVE-2026-110847 | 7.0 | Oct 14 | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110846 | 7.0 | Oct 14 | n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110840 | 7.0 | Oct 14 | n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field Affected: before 2.41.4; 2.42.0 before 2.42.1 |