Login Request a demo
N8
Product
n8n
by n8n · last CVE Sep 8, 2026
On CISA KEVExploited in the wild
183
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities183In the news6Timeline
Severity mix
Critical 30High 70Medium 83Low 0
Severity
All severities183Critical30High70Medium83Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add n8n to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59208
6.8
0%
Jul 9
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
Affected: before 2.27.4; 2.28.0
CVE-2026-86077
6.5
0%
Sep 8
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Affected: before 2.37.7; 2.38.0 before 2.38.2
CVE-2026-86078
6.5
1%
Sep 8
n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
Affected: before 2.37.7; 2.38.0 before 2.38.2
CVE-2026-86079
6.5
0%
Sep 8
n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
Affected: before 1.123.76; 2.0.0 before 2.37.7; 2.38.0 before 2.38.2
CVE-2026-86082
6.5
0%
Sep 8
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
Affected: before 1.123.76; 2.0.0 before 2.37.7; 2.38.0 before 2.38.2
CVE-2026-85171
6.5
1%
Sep 3
n8n before 1.123.73 Credential Exposure via Error Logging
Affected: before 1.123.73; 2.0.0 before 2.35.4; 2.36.0 before 2.36.2
CVE-2026-85170
6.5
0%
Sep 3
n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes
Affected: before 1.123.73; 2.0.0 before 2.35.4; 2.36.0 before 2.36.2
CVE-2026-85167
6.5
0%
Sep 3
n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
Affected: before 2.35.4; 2.36.0 before 2.36.2
CVE-2026-85166
6.5
0%
Sep 3
n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node
Affected: before 2.35.4; 2.36.0 before 2.36.2
CVE-2026-77085
6.5
0%
Aug 20
n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool
Affected: 2.33.0 before 2.33.4; 2.34.0
CVE-2026-77076
6.5
0%
Aug 20
n8n before 1.123.69 Credential Leak via GraphQL Node Error
Affected: before 1.123.69; 2.33.0 before 2.33.4; 2.34.0
CVE-2026-77074
6.5
0%
Aug 20
n8n before 1.123.69 SSRF via Edit Image Node
Affected: before 1.123.69; 2.33.0 before 2.33.4; 2.34.0
CVE-2026-72774
6.5
0%
Aug 11
n8n before 1.123.67 Authentication Bypass via HTTP Request Node
Affected: before 1.123.67; 2.0.0 before 2.31.5; 2.32.0
CVE-2026-72771
6.5
0%
Aug 11
n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes
Affected: before 2.31.5; before 2.31.5; 2.32.0; 2.32.0
CVE-2026-72770
6.5
1%
Aug 11
n8n before 1.123.67 Path Traversal via Git Node Operations
Affected: before 1.123.67; 2.31.0 before 2.31.5; 2.32.0 before 2.32.1
CVE-2026-72763
6.5
0%
Aug 11
n8n before 1.123.67 Credential Exfiltration via Sub-Workflow
Affected: before 1.123.67; 2.31.0 before 2.31.5; 2.32.0
CVE-2026-72749
6.5
1%
Aug 11
n8n before 1.123.67 Prototype Pollution via Edit Fields
Affected: before 1.123.67; 2.31.0 before 2.31.5; 2.32.0
CVE-2026-65599
6.5
0%
Jul 22
n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header
Affected: before 1.123.64; before 1.123.64; 2.0.0 before 2.29.8; 2.0.0 before 2.29.8; 2.30.0; 2.30.0
CVE-2026-65594
6.5
0%
Jul 22
n8n before 2.30.1 Missing OAuth Authorization Check
Affected: 2.27.0 before 2.29.8; 2.27.0 before 2.29.8; 2.30.0; 2.30.0
CVE-2026-65589
6.5
0%
Jul 22
n8n before 1.123.64 Credential Exposure via LLM Node Execution Data
Affected: before 1.123.64; before 1.123.64; 2.0.0 before 2.29.8; 2.0.0 before 2.29.8; 2.30.0; 2.30.0
CVE-2026-59259
6.5
0%
Jul 15
n8n - Permission Bypass via Expression Parser Mismatch in External Secrets
Affected: before 1.123.61; before 2.28.1; before 2.27.4
CVE-2026-59209
6.5
0%
Jul 9
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
Affected: before 1.123.61; before 1.123.61; 2.0.0 before 2.27.4; 2.0.0 before 2.27.4; 2.28.0; 2.28.0
CVE-2026-59207
6.5
0%
Jul 9
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
Affected: before 2.27.4; 2.28.0
CVE-2026-42228
6.5
0%
May 4
n8n: Hijacking of Unauthenticated Chat Execution
Affected: before 1.123.32; 2.17.0 before 2.17.4; 2.18.0
CVE-2026-42227
6.5
0%
May 4
n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure
Affected: before 1.123.32; 2.17.0 before 2.17.4; 2.18.0
CVE-2026-33663
6.5
0%
Mar 25
n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
Affected: before 1.123.27; 2.0.0 before 2.13.3; 2.14.0
CVE-2026-27496
6.5
0%
Mar 25
n8n has In-Process Memory Disclosure in its Task Runner
Affected: before 1.123.22; 2.0.0 before 2.9.3; 2.10.0
CVE-2026-25631
6.5
0%
Feb 6
Domain allowlist bypass enables credential exfiltration
Affected: before 1.121.0
CVE-2026-21894
6.5
0%
Jan 8
n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks
Affected: 0.150.0 before 2.2.2
CVE-2025-57749
6.5
0%
Aug 20
n8n is a workflow automation platform
Affected: before 1.106.0
CVE-2023-27562
6.5
2%
May 10
The n8n package 0.218.0 for Node.js allows Directory Traversal
Affected: 0.218.0
CVE-2026-85172
6.4
0%
Sep 3
n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass
Affected: before 2.33.4; 2.34.0
CVE-2026-56352
6.4
0%
Jul 15
n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter
Affected: before 2.19.3; before 2.19.3
CVE-2026-56778
6.4
0%
Jul 8
n8n - Authorization Bypass in Public API Execution Retry Endpoint
Affected: before 2.26.2; before 2.25.7
CVE-2026-54306
6.4
0%
Jun 23
n8n: Prototype Pollution enables confused-deputy execution via public webhooks
Affected: before 2.25.7; 2.26.0 before 2.26.2
CVE-2026-59254
6.3
0%
Jul 15
n8n - External Secrets Disclosure via Workflow Node Expressions
Affected: before 2.28.1; before 2.27.4
CVE-2026-56349
6.3
0%
Jul 15
n8n - Guardrail Node Bypass via Crafted Input
Affected: before 2.10.0
CVE-2026-42230
6.1
0%
May 4
n8n: Open Redirect in MCP OAuth Consent Flow
Affected: before 1.123.32; 2.17.0 before 2.17.4; 2.18.0
CVE-2026-77083
5.9
0%
Aug 20
n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution
Affected: before 1.123.69; 2.0.0 before 2.33.4; 2.34.0
CVE-2026-86084
5.5
0%
Sep 8
n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
Affected: before 1.123.76; 2.0.0 before 2.37.7; 2.38.0 before 2.38.2
CVE-2026-86996
5.4
0%
Sep 8
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
Affected: before 2.37.7; 2.38.0 before 2.38.2
CVE-2026-65597
5.4
0%
Jul 22
n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe
Affected: before 1.123.64; before 1.123.64; 2.0.0 before 2.29.8; 2.0.0 before 2.29.8; 2.30.0; 2.30.0
CVE-2026-65593
5.4
0%
Jul 22
n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters
Affected: before 1.123.64; before 1.123.64; 2.0.0 before 2.29.8; 2.0.0 before 2.29.8; 2.30.0; 2.30.0
CVE-2026-65592
5.4
0%
Jul 22
n8n before 1.123.64 Stored DOM XSS via cachedResultUrl
Affected: before 1.123.64; before 1.123.64; 2.0.0 before 2.29.8; 2.0.0 before 2.29.8; 2.30.0; 2.30.0
CVE-2026-56354
5.4
0%
Jul 10
n8n - Cross-Site Scripting and Open Redirect in Form Node
Affected: before 1.123.24; 2.0.0-rc.0 before 2.10.4; 2.11.0 before 2.12.0; before 2.10.4; before 1.123.24
CVE-2026-56775
5.4
0%
Jul 8
n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints
Affected: before 1.123.55; before 2.26.2; before 2.25.7
CVE-2026-56359
5.4
0%
Jul 8
n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL
Affected: before 2.8.0; before 2.6.4
CVE-2026-56356
5.4
0%
Jun 30
n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field
Affected: before 1.123.27; 2.0.0-rc.0 before 2.13.3; 2.14.0 before 2.14.1; before 2.14.1; before 2.13.3
CVE-2026-56358
5.4
0%
Jun 24
n8n - Stored Cross-Site Scripting in Form Trigger Node
Affected: before 1.123.25; 2.0.0-rc.0 before 2.11.2; before 2.11.2; before 1.123.25
CVE-2026-54302
5.4
0%
Jun 23
n8n: Stored XSS in Chat Trigger Node
Affected: before 1.123.55; 2.0.0 before 2.25.7; 2.26.0 before 2.26.2
Page 3 of 4 · 183 total
1234