Login Request a demo
N8
Product
n8n
by n8n-io · last CVE Oct 14, 2026
On CISA KEVExploited in the wild
181
CVEs
1
On KEV
10.0
Max CVSS
30
New 30D
Vulnerabilities181In the news6Timeline
Severity mix
Critical 28High 84Medium 69Low 0
Severity
All severities181Critical28High84Medium69Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add n8n to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54308
7.2
0%
Jun 23
n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node
Affected: >= 2.26.0, < 2.26.2; < 2.25.7
CVE-2026-21893
7.2
2%
Feb 4
n8n Vulnerable to Command Injection in Community Package Installation
Affected: >= 0.187.0, < 1.120.3
CVE-2026-110853
7.1
0%
Oct 14
n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON
Affected: before 1.123.83
CVE-2026-103256
7.1
0%
Oct 1
n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook
Affected: before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-103251
7.1
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-86081
7.1
1%
Sep 8
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-86074
7.1
0%
Sep 8
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
Affected: < 2.37.7; >= 2.38.0, < 2.38.2
CVE-2026-77081
7.1
0%
Aug 20
n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-59206
7.1
1%
Jul 9
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration
Affected: >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4; < 1.123.61
CVE-2026-110847
7.0
0%
Oct 14
n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter
Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-110846
7.0
1%
Oct 14
n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook
Affected: before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-110840
7.0
0%
Oct 14
n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field
Affected: before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-103258
6.8
0%
Oct 1
n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation
Affected: before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-59208
6.8
0%
Jul 9
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
Affected: >= 2.28.0, < 2.28.1; < 2.27.4
CVE-2026-86077
6.5
0%
Sep 8
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Affected: < 2.37.7; >= 2.38.0, < 2.38.2
CVE-2026-86078
6.5
1%
Sep 8
n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
Affected: < 2.37.7; >= 2.38.0, < 2.38.2
CVE-2026-86079
6.5
0%
Sep 8
n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-86082
6.5
0%
Sep 8
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-85171
6.5
1%
Sep 3
n8n before 1.123.73 Credential Exposure via Error Logging
Affected: before 1.123.73; before 2.36.2; before 2.35.4
CVE-2026-85170
6.5
0%
Sep 3
n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes
Affected: before 1.123.73; before 2.36.2; before 2.35.4
CVE-2026-85167
6.5
0%
Sep 3
n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
Affected: before 2.36.2; before 2.35.4
CVE-2026-85166
6.5
0%
Sep 3
n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node
Affected: before 2.36.2; before 2.35.4
CVE-2026-77085
6.5
0%
Aug 20
n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool
Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77076
6.5
0%
Aug 20
n8n before 1.123.69 Credential Leak via GraphQL Node Error
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77074
6.5
0%
Aug 20
n8n before 1.123.69 SSRF via Edit Image Node
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-72774
6.5
0%
Aug 11
n8n before 1.123.67 Authentication Bypass via HTTP Request Node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72771
6.5
0%
Aug 11
n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes
Affected: before 2.32.1; before 2.31.5
CVE-2026-72770
6.5
1%
Aug 11
n8n before 1.123.67 Path Traversal via Git Node Operations
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72763
6.5
0%
Aug 11
n8n before 1.123.67 Credential Exfiltration via Sub-Workflow
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72749
6.5
1%
Aug 11
n8n before 1.123.67 Prototype Pollution via Edit Fields
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-65599
6.5
0%
Jul 22
n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-65594
6.5
0%
Jul 22
n8n before 2.30.1 Missing OAuth Authorization Check
Affected: before 2.30.1; before 2.29.8
CVE-2026-65589
6.5
0%
Jul 22
n8n before 1.123.64 Credential Exposure via LLM Node Execution Data
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-59209
6.5
0%
Jul 9
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
Affected: >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4; < 1.123.61
CVE-2026-59207
6.5
0%
Jul 9
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
Affected: >= 2.28.0, < 2.28.1; < 2.27.4
CVE-2026-42228
6.5
0%
May 4
n8n: Hijacking of Unauthenticated Chat Execution
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42227
6.5
0%
May 4
n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-33663
6.5
0%
Mar 25
n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-27496
6.5
0%
Mar 25
n8n has In-Process Memory Disclosure in its Task Runner
Affected: < 1.123.22; >= 2.0.0-rc.0, < 2.9.3; >= 2.10.0, < 2.10.1
CVE-2026-25631
6.5
0%
Feb 6
Domain allowlist bypass enables credential exfiltration
Affected: < 1.121.0
CVE-2026-21894
6.5
0%
Jan 8
n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks
Affected: >= 0.150.0, < 2.2.2
CVE-2026-85172
6.4
0%
Sep 3
n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass
Affected: before 2.34.1; before 2.33.4
CVE-2026-54306
6.4
0%
Jun 23
n8n: Prototype Pollution enables confused-deputy execution via public webhooks
Affected: >= 2.26.0, < 2.26.2; < 2.25.7
CVE-2026-110852
6.3
0%
Oct 14
n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution
Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-103254
6.3
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-110851
6.1
0%
Oct 14
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint
Affected: before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-110841
6.1
0%
Oct 14
n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval
Affected: before 2.41.4
CVE-2026-42230
6.1
0%
May 4
n8n: Open Redirect in MCP OAuth Consent Flow
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-110848
6.0
0%
Oct 14
n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge
Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-77083
5.9
0%
Aug 20
n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
Page 3 of 4 · 181 total
1234