N8
Product
n8n
On CISA KEVExploited in the wild
183
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 30High 70Medium 83Low 0
Watch
Add n8n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68613 In wildKEV | 8.8 | Dec 19 | n8n Vulnerable to Remote Code Execution via Expression Injection Affected: 0.211.0 before 1.120.4; 1.121.0 |
| CVE-2026-54309 | 10.0 | Jun 23 | n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions Affected: before 2.25.7; 2.26.0 before 2.26.2 |
| CVE-2026-21858 | 10.0 | Jan 7 | n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling Affected: 1.65.0 before 1.121.0 |
| CVE-2026-85165 | 9.9 | Sep 3 | n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement Affected: before 2.35.4; 2.36.0 through 2.36.2 |
| CVE-2026-72765 | 9.9 | Aug 11 | n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape Affected: 2.31.0 before 2.31.5; 2.32.0 |
| CVE-2026-44791 | 9.9 | Jun 23 | n8n: XML Node Prototype Pollution Patch Bypass Affected: before 1.123.43; 2.0.0 before 2.20.7; 2.21.0 before 2.22.1 |
| CVE-2026-44789 | 9.9 | Jun 23 | n8n: HTTP Request Node Pagination Prototype Pollution to RCE Affected: before 1.123.43; 2.0.0 before 2.20.7; 2.21.0 before 2.22.1 |
| CVE-2026-54305 | 9.9 | Jun 23 | n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints Affected: before 1.123.55; 2.0.0 before 2.25.7; 2.26.0 before 2.26.2 |
| CVE-2026-54310 | 9.9 | Jun 23 | n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes Affected: before 2.25.7; 2.26.0 before 2.26.2 |
| CVE-2026-56348 | 9.9 | Jun 22 | n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint Affected: before 2.20.0 |
| CVE-2026-27577 | 9.9 | Feb 25 | n8n: Expression Sandbox Escape Leads to RCE Affected: before 1.123.22; 2.0.0 before 2.9.3; 2.10.0 before 2.10.1 |
| CVE-2026-27495 | 9.9 | Feb 25 | n8n has a Sandbox Escape in its JavaScript Task Runner Affected: before 1.123.22; 2.0.0 before 2.9.3; 2.10.0 before 2.10.1 |
| CVE-2026-27494 | 9.9 | Feb 25 | n8n has Arbitrary File Read via Python Code Node Sandbox Escape Affected: before 1.123.22; 2.0.0 before 2.9.3; 2.10.0 before 2.10.1 |
| CVE-2026-25115 | 9.9 | Feb 4 | n8n is vulnerable to Python sandbox escape Affected: before 2.4.8 |
| CVE-2026-25053 | 9.9 | Feb 4 | n8n is Vulnerable to OS Command Injection in Git Node Affected: before 1.123.0; 2.0.0 before 2.5.0 |
| CVE-2026-25052 | 9.9 | Feb 4 | n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users Affected: before 1.123.18; 2.0.0 before 2.5.0 |
| CVE-2026-25049 | 9.9 | Feb 4 | n8n Has an Expression Escape Vulnerability Leading to RCE Affected: before 1.123.17; 2.0.0 before 2.5.2 |
| CVE-2026-1470 | 9.9 | Jan 27 | Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node. Affected: before 1.123.17; 2.0.0 before 2.4.5; 2.5.0 |
| CVE-2026-0863 | 9.9 | Jan 18 | Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host. Affected: through 1.123.14; 2.0.0 through 2.3.5; 2.4.0 through 2.4.2 |
| CVE-2026-21877 | 9.9 | Jan 8 | n8n is vulnerable to Remote Code Execution via Arbitrary File Write Affected: 0.123.0 before 1.121.3 |
| CVE-2025-68668 | 9.9 | Dec 26 | n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node Affected: 1.0.0 before 2.0.0 |
| CVE-2026-77071 | 9.8 | Aug 20 | n8n before 1.123.69 PostgREST Filter Injection via Supabase Affected: before 1.123.69; 2.33.0 before 2.33.4; 2.34.0 |
| CVE-2026-77070 | 9.8 | Aug 20 | n8n before 1.123.69 NoSQL Injection via MongoDB Node Affected: before 1.123.69; 2.33.0 before 2.33.4; 2.34.0 |
| CVE-2026-65590 | 9.8 | Jul 22 | n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows Affected: before 2.29.8; before 2.29.8; 2.30.0; 2.30.0 |
| CVE-2026-42233 | 9.8 | May 4 | n8n: SQL Injection in Oracle Database Node via Limit Field Affected: before 1.123.32; 2.17.0 before 2.17.4; 2.18.0 |
| CVE-2026-56351 | 9.6 | Jun 24 | n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes Affected: before 2.4.0 |
| CVE-2026-54307 | 9.6 | Jun 23 | n8n: Credential Exfiltration via Permission Bypass Affected: before 1.123.55; 2.0.0 before 2.25.7; 2.26.0 before 2.26.2 |
| CVE-2026-42235 | 9.6 | May 4 | n8n: XSS via MCP OAuth client Affected: before 1.123.32; 2.17.0 before 2.17.4; 2.18.0 |
| CVE-2026-44792 | 9.0 | Jun 23 | n8n: Source Control Pull SQL Injection Affected: before 1.123.43; 2.0.0 before 2.20.7; 2.21.0 before 2.22.1 |
| CVE-2026-33749 | 9.0 | Mar 25 | n8n Vulnerable to XSS via Binary Data Inline HTML Rendering Affected: before 1.123.27; 2.0.0 before 2.13.3; 2.14.0 |
| CVE-2026-27493 | 9.0 | Feb 25 | n8n has Unauthenticated Expression Evaluation via Form Node Affected: before 1.123.22; 2.0.0 before 2.9.3; 2.10.0 before 2.10.1 |
| CVE-2026-86076 | 8.8 | Sep 8 | n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution Affected: before 1.123.76; 2.0.0 before 2.37.7; 2.38.0 before 2.38.2 |
| CVE-2026-86083 | 8.8 | Sep 8 | n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution Affected: before 1.123.76; 2.0.0 before 2.37.7; 2.38.0 before 2.38.2 |
| CVE-2026-85169 | 8.8 | Sep 3 | n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak Affected: before 1.123.73; 2.0.0 before 2.35.4; 2.36.0 before 2.36.2 |
| CVE-2026-85168 | 8.8 | Sep 3 | n8n before 1.123.73 Remote Code Execution via Git Node Affected: before 1.123.73; 2.0.0 before 2.35.4; 2.36.0 before 2.36.2 |
| CVE-2026-77084 | 8.8 | Aug 20 | n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values Affected: before 1.123.69; 2.0.0 before 2.33.4; 2.34.0 |
| CVE-2026-77080 | 8.8 | Aug 20 | n8n before 1.123.69 Arbitrary File Read and Write via Snowflake Affected: before 1.123.69; 2.0.0 before 2.33.4; 2.34.0 |
| CVE-2026-77079 | 8.8 | Aug 20 | n8n before 2.34.1 Authorization Bypass via Custom Role Deletion Affected: before 2.33.4; 2.34.0 |
| CVE-2026-77068 | 8.8 | Aug 20 | n8n before 2.34.1 Remote Code Execution via Path Traversal Affected: 2.33.0 before 2.33.4; 2.34.0 |
| CVE-2026-72775 | 8.8 | Aug 11 | n8n before 1.123.67 SQL Injection via PostgresTrigger Node Affected: before 1.123.67; 2.31.0 before 2.31.5; 2.32.0 |
| CVE-2026-72772 | 8.8 | Aug 11 | n8n before 2.32.1 Authentication Bypass via Token Exchange Affected: before 2.31.5; 2.32.0 |
| CVE-2026-72767 | 8.8 | Aug 11 | n8n before 1.123.67 Remote Code Execution via Git node Affected: before 1.123.67; 2.0.0 before 2.31.5; 2.32.0 |
| CVE-2026-72764 | 8.8 | Aug 11 | n8n before 1.123.67 Module Cache Poisoning via Code Node Affected: before 1.123.67; 2.0.0 before 2.31.5; 2.32.0 |
| CVE-2026-72762 | 8.8 | Aug 11 | n8n before 1.123.67 Arbitrary File Write via Edit Image Node Affected: before 1.123.67; 2.0.0 before 2.31.5; 2.32.0 |
| CVE-2026-72750 | 8.8 | Aug 11 | n8n before 1.123.67 SQL Injection via executeQuery Operation Affected: before 1.123.67; before 1.123.67; 2.0.0 before 2.31.5; 2.0.0 before 2.31.5; 2.32.0; 2.32.0 |
| CVE-2026-65595 | 8.8 | Jul 22 | n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange Affected: before 2.29.8; before 2.29.8; 2.30.0; 2.30.0 |
| CVE-2026-65591 | 8.8 | Jul 22 | n8n before 1.123.64 Sanitizer Bypass Remote Code Execution Affected: before 1.123.64; before 1.123.64; 2.0.0 before 2.29.8; 2.0.0 before 2.29.8; 2.30.0; 2.30.0 |
| CVE-2026-65016 | 8.8 | Jul 22 | n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role Affected: before 1.123.64; before 1.123.64; 2.0.0 before 2.29.8; 2.0.0 before 2.29.8; 2.30.0; 2.30.0 |
| CVE-2026-65015 | 8.8 | Jul 22 | n8n before 2.30.1 Privilege Escalation via run_node_tool Affected: before 2.29.8; before 2.29.8; 2.30.0; 2.30.0 |
| CVE-2026-59257 | 8.8 | Jul 8 | n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation Affected: before 1.123.61; before 2.28.1; before 2.27.4 |