Login Request a demo
N8
Product
n8n
by n8n-io · last CVE Oct 14, 2026
On CISA KEVExploited in the wild
155
CVEs
1
On KEV
10.0
Max CVSS
30
New 30D
Vulnerabilities155In the news4Timeline
Severity mix
Critical 17High 77Medium 61Low 0
Severity
All severities155Critical17High77Medium61Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add n8n to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-68613
In wildKEV
8.8
99%
Dec 19
n8n Vulnerable to Remote Code Execution via Expression Injection
Affected: >= 0.211.0, < 1.120.4; = 1.121.0
CVE-2026-54309
10.0
1%
Jun 23
n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
Affected: >= 2.26.0, < 2.26.2; < 2.25.7
CVE-2026-85165
9.9
1%
Sep 3
n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement
Affected: before 2.36.2; before 2.35.4
CVE-2026-72765
9.9
1%
Aug 11
n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape
Affected: before 2.32.1; before 2.31.5
CVE-2026-44791
9.9
1%
Jun 23
n8n: XML Node Prototype Pollution Patch Bypass
Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1
CVE-2026-44789
9.9
1%
Jun 23
n8n: HTTP Request Node Pagination Prototype Pollution to RCE
Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1
CVE-2026-54305
9.9
0%
Jun 23
n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2
CVE-2026-54310
9.9
1%
Jun 23
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
Affected: >= 2.26.0, < 2.26.2; < 2.25.7
CVE-2026-77071
9.8
1%
Aug 20
n8n before 1.123.69 PostgREST Filter Injection via Supabase
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77070
9.8
1%
Aug 20
n8n before 1.123.69 NoSQL Injection via MongoDB Node
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-65590
9.8
1%
Jul 22
n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows
Affected: before 2.30.1; before 2.29.8
CVE-2026-42233
9.8
0%
May 4
n8n: SQL Injection in Oracle Database Node via Limit Field
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-54307
9.6
0%
Jun 23
n8n: Credential Exfiltration via Permission Bypass
Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2
CVE-2026-42235
9.6
0%
May 4
n8n: XSS via MCP OAuth client
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-103255
9.0
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-103248
9.0
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-44792
9.0
0%
Jun 23
n8n: Source Control Pull SQL Injection
Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1
CVE-2026-33749
9.0
0%
Mar 25
n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-71539
8.9
0%
Aug 18
n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
Affected: < 1.123.64; >= 2.0.0-rc.0, < 2.29.8; >= 2.30.0, < 2.30.1
CVE-2026-86076
8.8
1%
Sep 8
n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-86083
8.8
1%
Sep 8
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-85169
8.8
1%
Sep 3
n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak
Affected: before 1.123.73; before 2.36.2; before 2.35.4
CVE-2026-85168
8.8
1%
Sep 3
n8n before 1.123.73 Remote Code Execution via Git Node
Affected: before 1.123.73; before 2.36.2; before 2.35.4
CVE-2026-77084
8.8
1%
Aug 20
n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77080
8.8
1%
Aug 20
n8n before 1.123.69 Arbitrary File Read and Write via Snowflake
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77079
8.8
0%
Aug 20
n8n before 2.34.1 Authorization Bypass via Custom Role Deletion
Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77068
8.8
1%
Aug 20
n8n before 2.34.1 Remote Code Execution via Path Traversal
Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-72775
8.8
0%
Aug 11
n8n before 1.123.67 SQL Injection via PostgresTrigger Node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72772
8.8
0%
Aug 11
n8n before 2.32.1 Authentication Bypass via Token Exchange
Affected: before 2.32.1; before 2.31.5
CVE-2026-72767
8.8
1%
Aug 11
n8n before 1.123.67 Remote Code Execution via Git node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72764
8.8
1%
Aug 11
n8n before 1.123.67 Module Cache Poisoning via Code Node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72762
8.8
0%
Aug 11
n8n before 1.123.67 Arbitrary File Write via Edit Image Node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72750
8.8
0%
Aug 11
n8n before 1.123.67 SQL Injection via executeQuery Operation
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-65595
8.8
1%
Jul 22
n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange
Affected: before 2.30.1; before 2.29.8
CVE-2026-65591
8.8
1%
Jul 22
n8n before 1.123.64 Sanitizer Bypass Remote Code Execution
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-65016
8.8
0%
Jul 22
n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-65015
8.8
1%
Jul 22
n8n before 2.30.1 Privilege Escalation via run_node_tool
Affected: before 2.30.1; before 2.29.8
CVE-2026-44790
8.8
1%
Jun 23
n8n: Arbitrary File Read via Git Node
Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1
CVE-2026-42237
8.8
0%
May 4
n8n: SQL Injection in Snowflake and MySQL Nodes
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42234
8.8
0%
May 4
n8n: Python Task Runner Sandbox Escape
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42232
8.8
0%
May 4
n8n: XML Node Prototype Pollution to RCE
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42231
8.8
1%
May 4
n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42229
8.8
0%
May 4
n8n: SQL Injection in SeaTable Node
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-33713
8.8
0%
Mar 25
n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression
Affected: < 1.123.26; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-33696
8.8
1%
Mar 25
n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-33660
8.8
1%
Mar 25
n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-103253
8.7
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-103247
8.5
0%
Oct 1
n8n before 1.123.80 Credential Tampering via Duplicate Node IDs
Affected: before 1.123.80
CVE-2026-49444
8.5
0%
Jun 23
n8n: Python sandbox escape
Affected: < 1.123.48; >= 2.0.0-rc.0, < 2.21.8; >= 2.22.0, < 2.22.4
CVE-2026-54312
8.5
0%
Jun 23
n8n: Microsoft SQL Node Prototype Pollution
Affected: < 2.24.0
Page 1 of 4 · 155 total
12…4