Login Request a demo
N8
Product
n8n
by n8n-io · last CVE Oct 28, 2026
On CISA KEVExploited in the wild
198
CVEs
1
On KEV
10.0
Max CVSS
45
New 30D
Vulnerabilities198In the news6Timeline
Severity mix
Critical 28High 97Medium 73Low 0
Severity
All severities198Critical28High97Medium73Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add n8n to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54309
10.0
1%
Jun 23
n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
Affected: >= 2.26.0, < 2.26.2; < 2.25.7
CVE-2026-21858
10.0
78%
Jan 7
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
Affected: >= 1.65.0, < 1.121.0
CVE-2026-85165
9.9
1%
Sep 3
n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement
Affected: before 2.36.2; before 2.35.4
CVE-2026-72765
9.9
1%
Aug 11
n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape
Affected: before 2.32.1; before 2.31.5
CVE-2026-44791
9.9
1%
Jun 23
n8n: XML Node Prototype Pollution Patch Bypass
Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1
CVE-2026-44789
9.9
1%
Jun 23
n8n: HTTP Request Node Pagination Prototype Pollution to RCE
Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1
CVE-2026-54305
9.9
0%
Jun 23
n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2
CVE-2026-54310
9.9
1%
Jun 23
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
Affected: >= 2.26.0, < 2.26.2; < 2.25.7
CVE-2026-27577
9.9
11%
Feb 25
n8n: Expression Sandbox Escape Leads to RCE
Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1
CVE-2026-27495
9.9
1%
Feb 25
n8n has a Sandbox Escape in its JavaScript Task Runner
Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1
CVE-2026-27494
9.9
0%
Feb 25
n8n has Arbitrary File Read via Python Code Node Sandbox Escape
Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1
CVE-2026-25115
9.9
1%
Feb 4
n8n is vulnerable to Python sandbox escape
Affected: < 2.4.8
CVE-2026-25053
9.9
1%
Feb 4
n8n is Vulnerable to OS Command Injection in Git Node
Affected: < 1.123.10; < 2.5.0
CVE-2026-25052
9.9
0%
Feb 4
n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users
Affected: < 1.123.18; < 2.5.0
CVE-2026-25049
9.9
2%
Feb 4
n8n Has an Expression Escape Vulnerability Leading to RCE
Affected: < 1.123.17; < 2.5.2
CVE-2026-21877
9.9
5%
Jan 8
n8n is vulnerable to Remote Code Execution via Arbitrary File Write
Affected: < 1.121.3
CVE-2025-68668
9.9
13%
Dec 26
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
Affected: >= 1.0.0, < 2.0.0
CVE-2026-77071
9.8
1%
Aug 20
n8n before 1.123.69 PostgREST Filter Injection via Supabase
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77070
9.8
1%
Aug 20
n8n before 1.123.69 NoSQL Injection via MongoDB Node
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-65590
9.8
1%
Jul 22
n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows
Affected: before 2.30.1; before 2.29.8
CVE-2026-42233
9.8
0%
May 4
n8n: SQL Injection in Oracle Database Node via Limit Field
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-54307
9.6
0%
Jun 23
n8n: Credential Exfiltration via Permission Bypass
Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2
CVE-2026-42235
9.6
0%
May 4
n8n: XSS via MCP OAuth client
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-103255
9.0
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-103248
9.0
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-44792
9.0
0%
Jun 23
n8n: Source Control Pull SQL Injection
Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1
CVE-2026-33749
9.0
0%
Mar 25
n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-27493
9.0
1%
Feb 25
n8n has Unauthenticated Expression Evaluation via Form Node
Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1
Showing 28