Login Request a demo
N8
Product
n8n
by n8n-io · last CVE Oct 30, 2026
On CISA KEVExploited in the wild
206
CVEs
1
On KEV
10.0
Max CVSS
47
New 30D
Vulnerabilities206In the news6Timeline
Severity mix
Critical 28High 98Medium 80Low 0
Severity
All severities206Critical28High98Medium80Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add n8n to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42228
6.5
0%
May 4
n8n: Hijacking of Unauthenticated Chat Execution
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42227
6.5
0%
May 4
n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-33663
6.5
0%
Mar 25
n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-27496
6.5
0%
Mar 25
n8n has In-Process Memory Disclosure in its Task Runner
Affected: < 1.123.22; >= 2.0.0-rc.0, < 2.9.3; >= 2.10.0, < 2.10.1
CVE-2026-25631
6.5
0%
Feb 6
Domain allowlist bypass enables credential exfiltration
Affected: < 1.121.0
CVE-2026-21894
6.5
0%
Jan 8
n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks
Affected: >= 0.150.0, < 2.2.2
CVE-2025-57749
6.5
0%
Aug 20
n8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted files
Affected: < 1.106.0
CVE-2026-85172
6.4
0%
Sep 3
n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass
Affected: 2.34.0 before 2.34.1; before 2.33.4
CVE-2026-54306
6.4
0%
Jun 23
n8n: Prototype Pollution enables confused-deputy execution via public webhooks
Affected: >= 2.26.0, < 2.26.2; < 2.25.7
CVE-2026-110852
6.3
0%
Oct 14
n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution
Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-103254
6.3
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-110851
6.1
0%
Oct 14
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint
Affected: before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-110841
6.1
0%
Oct 14
n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval
Affected: before 2.41.4
CVE-2026-42230
6.1
0%
May 4
n8n: Open Redirect in MCP OAuth Consent Flow
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-110848
6.0
0%
Oct 14
n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge
Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-119557
New
5.9–Oct 30
n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node
Affected: 2.14.0 through 2.46.3
CVE-2026-118677
New
5.9
0%
Oct 28
n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
Affected: 2.42.0 before 2.42.1; before 2.41.4
CVE-2026-77083
5.9
0%
Aug 20
n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-86084
5.5
0%
Sep 8
n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-118640
New
5.4
0%
Oct 28
n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass
Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5
CVE-2026-86996
5.4
0%
Sep 8
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
Affected: < 2.37.7; >= 2.38.0, < 2.38.2
CVE-2026-65597
5.4
0%
Jul 22
n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe
Affected: before 1.123.64; 2.30.0 before 2.30.1; 2.0.0-rc.0 before 2.29.8
CVE-2026-65593
5.4
0%
Jul 22
n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters
Affected: before 1.123.64; 2.30.0 before 2.30.1; 2.0.0-rc.0 before 2.29.8
CVE-2026-65592
5.4
0%
Jul 22
n8n before 1.123.64 Stored DOM XSS via cachedResultUrl
Affected: before 1.123.64; 2.30.0 before 2.30.1; 2.0.0-rc.0 before 2.29.8
CVE-2026-54302
5.4
0%
Jun 23
n8n: Stored XSS in Chat Trigger Node
Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2
CVE-2026-54301
5.4
0%
Jun 23
n8n: Same-Origin XSS in Respond to Webhook Node
Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2
CVE-2026-54303
5.4
0%
Jun 23
n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints
Affected: < 2.24.0
CVE-2026-27578
5.4
0%
Feb 25
n8n Vulnerable to Stored XSS via Various Nodes
Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1
CVE-2026-25054
5.4
0%
Feb 4
n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI
Affected: < 1.123.9; < 2.2.1
CVE-2026-25051
5.4
0%
Feb 4
n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS
Affected: < 1.123.2
CVE-2025-68697
5.4
0%
Dec 26
Self-hosted n8n has Legacy Code node that enables arbitrary file read/write
Affected: < 2.0.0
CVE-2025-61914
5.4
0%
Dec 26
n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox
Affected: < 1.114.0
CVE-2025-58177
5.4
0%
Sep 15
n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameter
Affected: >= 1.24.0, < 1.107.0
CVE-2025-52478
5.4
0%
Aug 19
Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source
Affected: >= 1.77.0, < 1.98.2
CVE-2025-49592
5.4
0%
Jun 26
n8n Login Flow has Open Redirect Vulnerability
Affected: < 1.98.0
CVE-2025-46343
5.4
0%
Apr 29
n8n Vulnerable to Stored XSS through Attachments View Endpoint
Affected: < 1.90.0
CVE-2026-103245
5.3
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-86080
5.3
0%
Sep 8
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-65014
5.3
1%
Jul 22
n8n before 2.28.0 Authentication Bypass via test-webhook
Affected: before 2.27.4
CVE-2026-33722
5.3
0%
Mar 25
n8n Has External Secrets Authorization Bypass in Credential Saving
Affected: < 1.123.23; >= 2.0.0-rc.0, < 2.6.4
CVE-2025-68949
5.3
0%
Jan 13
n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching
Affected: >= 1.36.0, < 2.2.0
CVE-2026-92587
5.0
0%
Sep 16
n8n before 1.123.76 Sandbox Escape via Git Relative URL
Affected: before 1.123.76; 2.38.0 before 2.38.2; 2.0.0-rc.0 before 2.37.7
CVE-2026-86085
4.9
0%
Sep 8
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
Affected: < 2.37.7; >= 2.38.0, < 2.38.2
CVE-2026-86993
4.9
0%
Sep 8
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2025-49595
4.9
0%
Jul 3
n8n Vulnerable to Denial of Service via Malformed Binary Data Requests
Affected: < 1.99.0
CVE-2026-33751
4.8
0%
Mar 25
n8n Vulnerable to LDAP Filter Injection in LDAP Node
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-92588
4.4
0%
Sep 16
n8n before 1.123.76 Improper Authorization via Source Control Push
Affected: before 1.123.76; 2.38.0 before 2.38.2; 2.0.0-rc.0 before 2.37.7
CVE-2026-86994
4.3
0%
Sep 8
n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-86995
4.3
0%
Sep 8
n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-85173
4.3
0%
Sep 3
n8n before 2.36.2 Missing Authorization via Insights API
Affected: 2.36.0 before 2.36.2; before 2.35.4
Page 4 of 5 · 206 total
1…345