N8
Product
n8n
On CISA KEVExploited in the wild
204
CVEs
1
On KEV
10.0
Max CVSS
45
New 30D
Severity mix
Critical 28High 97Medium 79Low 0
Watch
Add n8n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42236 | 7.5 | May 4 | n8n: Unauthenticated Denial of Service via MCP Client Registration Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |
| CVE-2026-42226 | 7.5 | May 4 | n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay Affected: < 1.123.33; >= 2.17.0, < 2.17.5 |
| CVE-2026-33665 | 7.5 | Mar 25 | n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover Affected: < 1.121.0; >= 2.0.0-rc.0, < 2.4.0 |
| CVE-2026-33724 | 7.4 | Mar 25 | n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no Affected: < 2.5.0 |
| CVE-2026-118648 New | 7.3 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-77075 | 7.3 | Aug 20 | n8n before 1.123.69 Expression Injection via Resource Locator Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-110850 | 7.2 | Oct 14 | n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110849 | 7.2 | Oct 14 | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110844 | 7.2 | Oct 14 | n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows Affected: before 1.123.83 |
| CVE-2026-54308 | 7.2 | Jun 23 | n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node Affected: >= 2.26.0, < 2.26.2; < 2.25.7 |
| CVE-2026-21893 | 7.2 | Feb 4 | n8n Vulnerable to Command Injection in Community Package Installation Affected: >= 0.187.0, < 1.120.3 |
| CVE-2026-118678 New | 7.1 | Oct 28 | n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-118676 New | 7.1 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-118675 New | 7.1 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-118642 New | 7.1 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-110853 | 7.1 | Oct 14 | n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON Affected: before 1.123.83 |
| CVE-2026-103256 | 7.1 | Oct 1 | n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook Affected: before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-103251 | 7.1 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-86081 | 7.1 | Sep 8 | n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-86074 | 7.1 | Sep 8 | n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content Affected: < 2.37.7; >= 2.38.0, < 2.38.2 |
| CVE-2026-77081 | 7.1 | Aug 20 | n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-59206 | 7.1 | Jul 9 | n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration Affected: >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4; < 1.123.61 |
| CVE-2026-110847 | 7.0 | Oct 14 | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110846 | 7.0 | Oct 14 | n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-110840 | 7.0 | Oct 14 | n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field Affected: before 2.41.4; 2.42.0 before 2.42.1 |
| CVE-2026-103258 | 6.8 | Oct 1 | n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation Affected: before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-59208 | 6.8 | Jul 9 | n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution Affected: >= 2.28.0, < 2.28.1; < 2.27.4 |
| CVE-2026-118646 New | 6.5 | Oct 28 | n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5 |
| CVE-2026-86077 | 6.5 | Sep 8 | n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket Affected: < 2.37.7; >= 2.38.0, < 2.38.2 |
| CVE-2026-86078 | 6.5 | Sep 8 | n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service Affected: < 2.37.7; >= 2.38.0, < 2.38.2 |
| CVE-2026-86079 | 6.5 | Sep 8 | n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-86082 | 6.5 | Sep 8 | n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-85171 | 6.5 | Sep 3 | n8n before 1.123.73 Credential Exposure via Error Logging Affected: before 1.123.73; 2.36.0 before 2.36.2; 2.0.0-rc.0 before 2.35.4 |
| CVE-2026-85170 | 6.5 | Sep 3 | n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes Affected: before 1.123.73; 2.36.0 before 2.36.2; 2.0.0-rc.0 before 2.35.4 |
| CVE-2026-85167 | 6.5 | Sep 3 | n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes Affected: 2.36.0 before 2.36.2; before 2.35.4 |
| CVE-2026-85166 | 6.5 | Sep 3 | n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node Affected: 2.36.0 before 2.36.2; before 2.35.4 |
| CVE-2026-77085 | 6.5 | Aug 20 | n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77076 | 6.5 | Aug 20 | n8n before 1.123.69 Credential Leak via GraphQL Node Error Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77074 | 6.5 | Aug 20 | n8n before 1.123.69 SSRF via Edit Image Node Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-72774 | 6.5 | Aug 11 | n8n before 1.123.67 Authentication Bypass via HTTP Request Node Affected: before 1.123.67; 2.32.0 before 2.32.1; 2.0.0-rc.0 before 2.31.5 |
| CVE-2026-72771 | 6.5 | Aug 11 | n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes Affected: 2.32.0 before 2.32.1; before 2.31.5 |
| CVE-2026-72770 | 6.5 | Aug 11 | n8n before 1.123.67 Path Traversal via Git Node Operations Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-72763 | 6.5 | Aug 11 | n8n before 1.123.67 Credential Exfiltration via Sub-Workflow Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-72749 | 6.5 | Aug 11 | n8n before 1.123.67 Prototype Pollution via Edit Fields Affected: before 1.123.67; before 2.32.1; before 2.31.5 |
| CVE-2026-65599 | 6.5 | Jul 22 | n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header Affected: before 1.123.64; before 2.30.1; before 2.29.8 |
| CVE-2026-65594 | 6.5 | Jul 22 | n8n before 2.30.1 Missing OAuth Authorization Check Affected: before 2.30.1; before 2.29.8 |
| CVE-2026-65589 | 6.5 | Jul 22 | n8n before 1.123.64 Credential Exposure via LLM Node Execution Data Affected: before 1.123.64; 2.30.0 before 2.30.1; 2.0.0-rc.0 before 2.29.8 |
| CVE-2026-59209 | 6.5 | Jul 9 | n8n: Shared Credential Header Leak via HTTP Request Pagination Expression Affected: >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4; < 1.123.61 |
| CVE-2026-59207 | 6.5 | Jul 9 | n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector Affected: >= 2.28.0, < 2.28.1; < 2.27.4 |
| CVE-2026-42228 | 6.5 | May 4 | n8n: Hijacking of Unauthenticated Chat Execution Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1 |