N8
Product
n8n
On CISA KEVExploited in the wild
183
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 30High 70Medium 83Low 0
Watch
Add n8n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-61917 | 7.7 | Feb 4 | n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner Affected: 1.65.0 before 1.114.3 |
| CVE-2026-86073 | 7.6 | Sep 8 | n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution Affected: before 2.37.7; 2.38.0 |
| CVE-2026-77077 | 7.6 | Aug 20 | n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution Affected: before 1.123.69; 2.33.0 before 2.33.4; 2.34.0 |
| CVE-2026-77072 | 7.6 | Aug 20 | n8n before 1.123.69 Stored XSS via Form Completion Page Affected: before 1.123.69; 2.33.0 before 2.33.4; 2.34.0 |
| CVE-2026-86075 | 7.5 | Sep 8 | n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint Affected: before 2.37.7; 2.38.0 before 2.38.2 |
| CVE-2026-72766 | 7.5 | Aug 11 | n8n before 1.123.67 Arbitrary File Read via Send Email Node Affected: before 1.123.67; before 1.123.67; 2.0.0 before 2.31.5; 2.0.0 before 2.31.5; 2.32.0; 2.32.0 |
| CVE-2026-65598 | 7.5 | Jul 22 | n8n before 1.123.64 Remote Code Execution via Git Clone Affected: before 1.123.64; before 1.123.64; 2.0.0 before 2.29.8; 2.0.0 before 2.29.8; 2.30.0; 2.30.0 |
| CVE-2026-54314 | 7.5 | Jun 23 | n8n: Denial of Service via ZIP decompression in webhook workflow Affected: before 2.24.0 |
| CVE-2026-42236 | 7.5 | May 4 | n8n: Unauthenticated Denial of Service via MCP Client Registration Affected: before 1.123.32; 2.17.0 through 2.17.4; 2.18.0 |
| CVE-2026-42226 | 7.5 | May 4 | n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay Affected: before 1.123.33; 2.17.0 before 2.17.5 |
| CVE-2026-33665 | 7.5 | Mar 25 | n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover Affected: before 1.121.0; 2.0.0 before 2.4.0 |
| CVE-2023-27564 | 7.5 | May 10 | The n8n package 0.218.0 for Node.js allows Information Disclosure Affected: 0.218.0 |
| CVE-2026-56776 | 7.4 | Jul 8 | n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint Affected: before 1.123.55; before 2.26.2; before 2.25.7 |
| CVE-2026-33724 | 7.4 | Mar 25 | n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no Affected: before 2.5.0 |
| CVE-2026-77075 | 7.3 | Aug 20 | n8n before 1.123.69 Expression Injection via Resource Locator Affected: before 1.123.69; 2.33.0 before 2.33.4; 2.34.0 |
| CVE-2026-54308 | 7.2 | Jun 23 | n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node Affected: before 2.25.7; 2.26.0 before 2.26.2 |
| CVE-2026-21893 | 7.2 | Feb 4 | n8n Vulnerable to Command Injection in Community Package Installation Affected: 0.187.0 before 1.120.3 |
| CVE-2026-86074 | 7.1 | Sep 8 | n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content Affected: before 2.37.7; 2.38.0 before 2.38.2 |
| CVE-2026-77081 | 7.1 | Aug 20 | n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node Affected: before 1.123.69; 2.0.0 before 2.33.4; 2.34.0 |
| CVE-2026-59206 | 7.1 | Jul 9 | n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration Affected: before 1.123.61; 2.0.0 before 2.27.4; 2.28.0 |