N8
Product
n8n
On CISA KEVExploited in the wild
204
CVEs
1
On KEV
10.0
Max CVSS
45
New 30D
Severity mix
Critical 28High 97Medium 79Low 0
Watch
Add n8n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77069 | 4.3 | Aug 20 | n8n before 1.123.69 SSRF Protection Bypass via OAuth2 Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2025-52554 | 4.3 | Jul 3 | n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflows Affected: < 1.99.1 |
| CVE-2026-33720 | 4.2 | Mar 25 | n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK Affected: < 2.8.0 |
| CVE-2026-103260 | 4.0 | Oct 1 | n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node Affected: before 2.39.6; 2.40.0 before 2.40.1 |