N8
Product
n8n
On CISA KEVExploited in the wild
183
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 30High 70Medium 83Low 0
Watch
Add n8n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54301 | 5.4 | Jun 23 | n8n: Same-Origin XSS in Respond to Webhook Node Affected: before 1.123.55; 2.0.0 before 2.25.7; 2.26.0 before 2.26.2 |
| CVE-2026-54303 | 5.4 | Jun 23 | n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints Affected: before 2.24.0 |
| CVE-2026-27578 | 5.4 | Feb 25 | n8n Vulnerable to Stored XSS via Various Nodes Affected: before 1.123.22; 2.0.0 before 2.9.3; 2.10.0 before 2.10.1 |
| CVE-2026-25054 | 5.4 | Feb 4 | n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI Affected: before 1.123.9; 2.0.0 before 2.2.1 |
| CVE-2026-25051 | 5.4 | Feb 4 | n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS Affected: before 1.123.2 |
| CVE-2025-68697 | 5.4 | Dec 26 | Self-hosted n8n has Legacy Code node that enables arbitrary file read/write Affected: before 2.0.0 |
| CVE-2025-61914 | 5.4 | Dec 26 | n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox Affected: before 1.114.0 |
| CVE-2025-58177 | 5.4 | Sep 15 | n8n is an open source workflow automation platform Affected: 1.24.0 before 1.107.0 |
| CVE-2025-52478 | 5.4 | Aug 19 | n8n is a workflow automation platform Affected: 1.77.0 before 1.98.2 |
| CVE-2025-49592 | 5.4 | Jun 26 | n8n is a workflow automation platform Affected: before 1.98.0 |
| CVE-2025-46343 | 5.4 | Apr 29 | n8n is a workflow automation platform Affected: before 1.90.0 |
| CVE-2026-86080 | 5.3 | Sep 8 | n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open Affected: before 1.123.76; 2.0.0 before 2.37.7; 2.38.0 before 2.38.2 |
| CVE-2026-65014 | 5.3 | Jul 22 | n8n before 2.28.0 Authentication Bypass via test-webhook Affected: 2.27.0 before 2.27.4; 2.27.0 before 2.27.4 |
| CVE-2026-56357 | 5.3 | Jun 22 | n8n - Webhook Forgery via Missing HMAC-SHA256 Signature Verification in GitHub Webhook Trigger Affected: before 1.123.15; 2.0.0 before 2.5.0 |
| CVE-2026-33722 | 5.3 | Mar 25 | n8n Has External Secrets Authorization Bypass in Credential Saving Affected: before 1.123.23; 2.0.0 before 2.6.4 |
| CVE-2025-68949 | 5.3 | Jan 13 | n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching Affected: 1.36.0 before 2.2.0 |
| CVE-2026-59253 | 5.0 | Jul 8 | n8n - Improper Authorization in Workflow Assignment to Folders Affected: before 2.28.0 |
| CVE-2026-56777 | 5.0 | Jun 30 | n8n - AST Validator Bypass in Python Code Node Affected: before 2.26.2; before 2.25.7 |
| CVE-2026-86085 | 4.9 | Sep 8 | n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints Affected: before 2.37.7; 2.38.0 before 2.38.2 |
| CVE-2026-86993 | 4.9 | Sep 8 | n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check Affected: before 1.123.76; 2.0.0 before 2.37.7; 2.38.0 before 2.38.2 |
| CVE-2025-49595 | 4.9 | Jul 3 | n8n is a workflow automation platform Affected: before 1.99.0 |
| CVE-2026-56353 | 4.8 | Jul 15 | n8n - Authentication Bypass in Chat Trigger Node Affected: before 1.123.22; 2.0.0 before 2.9.3; 2.10.0 before 2.10.1 |
| CVE-2026-33751 | 4.8 | Mar 25 | n8n Vulnerable to LDAP Filter Injection in LDAP Node Affected: before 1.123.27; 2.0.0 before 2.13.3; 2.14.0 |
| CVE-2026-86994 | 4.3 | Sep 8 | n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter Affected: before 1.123.76; 2.0.0 before 2.37.7; 2.38.0 before 2.38.2 |
| CVE-2026-86995 | 4.3 | Sep 8 | n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read Affected: before 1.123.76; 2.0.0 before 2.37.7; 2.38.0 before 2.38.2 |
| CVE-2026-85173 | 4.3 | Sep 3 | n8n before 2.36.2 Missing Authorization via Insights API Affected: before 2.35.4; 2.36.0 before 2.36.2 |
| CVE-2026-77082 | 4.3 | Aug 20 | n8n before 1.123.69 ReDoS via Filter and Switch Node Affected: before 1.123.69; 2.0.0 before 2.33.4; 2.34.0 |
| CVE-2026-77073 | 4.3 | Aug 20 | n8n before 2.34.1 Cross-Project Credential Access via MCP Affected: before 2.33.4; 2.34.0 |
| CVE-2026-77069 | 4.3 | Aug 20 | n8n before 1.123.69 SSRF Protection Bypass via OAuth2 Affected: before 1.123.69; 2.33.0 before 2.33.4; 2.34.0 |
| CVE-2026-58661 | 4.3 | Jul 10 | n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint Affected: before 2.28.0; before 1.123.58 |
| CVE-2025-52554 | 4.3 | Jul 3 | n8n is a workflow automation platform Affected: before 1.99.1 |
| CVE-2026-33720 | 4.2 | Mar 25 | n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK Affected: before 2.8.0 |
| CVE-2026-56360 | 4.0 | Jul 8 | n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger Affected: before 1.123.18; 2.0.0 before 2.6.2 |