Login Request a demo
N8
Product
n8n
by n8n-io · last CVE Oct 28, 2026
On CISA KEVExploited in the wild
203
CVEs
1
On KEV
10.0
Max CVSS
45
New 30D
Vulnerabilities203In the news6Timeline
Severity mix
Critical 28High 97Medium 78Low 0
Severity
All severities203Critical28High97Medium78Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add n8n to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-68613
In wildKEV
8.8
99%
Dec 19
n8n Vulnerable to Remote Code Execution via Expression Injection
Affected: >= 0.211.0, < 1.120.4; = 1.121.0
CVE-2026-71539
8.9
0%
Aug 18
n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
Affected: < 1.123.64; >= 2.0.0-rc.0, < 2.29.8; >= 2.30.0, < 2.30.1
CVE-2026-86076
8.8
1%
Sep 8
n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-86083
8.8
1%
Sep 8
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-85169
8.8
1%
Sep 3
n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak
Affected: before 1.123.73; before 2.36.2; before 2.35.4
CVE-2026-85168
8.8
1%
Sep 3
n8n before 1.123.73 Remote Code Execution via Git Node
Affected: before 1.123.73; before 2.36.2; before 2.35.4
CVE-2026-77084
8.8
1%
Aug 20
n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77080
8.8
1%
Aug 20
n8n before 1.123.69 Arbitrary File Read and Write via Snowflake
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77079
8.8
0%
Aug 20
n8n before 2.34.1 Authorization Bypass via Custom Role Deletion
Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77068
8.8
1%
Aug 20
n8n before 2.34.1 Remote Code Execution via Path Traversal
Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-72775
8.8
0%
Aug 11
n8n before 1.123.67 SQL Injection via PostgresTrigger Node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72772
8.8
0%
Aug 11
n8n before 2.32.1 Authentication Bypass via Token Exchange
Affected: before 2.32.1; before 2.31.5
CVE-2026-72767
8.8
1%
Aug 11
n8n before 1.123.67 Remote Code Execution via Git node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72764
8.8
1%
Aug 11
n8n before 1.123.67 Module Cache Poisoning via Code Node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72762
8.8
0%
Aug 11
n8n before 1.123.67 Arbitrary File Write via Edit Image Node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72750
8.8
0%
Aug 11
n8n before 1.123.67 SQL Injection via executeQuery Operation
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-65595
8.8
1%
Jul 22
n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange
Affected: before 2.30.1; before 2.29.8
CVE-2026-65591
8.8
1%
Jul 22
n8n before 1.123.64 Sanitizer Bypass Remote Code Execution
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-65016
8.8
0%
Jul 22
n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-65015
8.8
1%
Jul 22
n8n before 2.30.1 Privilege Escalation via run_node_tool
Affected: before 2.30.1; before 2.29.8
CVE-2026-44790
8.8
1%
Jun 23
n8n: Arbitrary File Read via Git Node
Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1
CVE-2026-42237
8.8
0%
May 4
n8n: SQL Injection in Snowflake and MySQL Nodes
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42234
8.8
0%
May 4
n8n: Python Task Runner Sandbox Escape
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42232
8.8
0%
May 4
n8n: XML Node Prototype Pollution to RCE
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42231
8.8
1%
May 4
n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42229
8.8
0%
May 4
n8n: SQL Injection in SeaTable Node
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-33713
8.8
0%
Mar 25
n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression
Affected: < 1.123.26; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-33696
8.8
1%
Mar 25
n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-33660
8.8
1%
Mar 25
n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-27498
8.8
1%
Feb 25
n8n has Arbitrary Command Execution via File Write and Git Operations
Affected: < 1.123.8; >= 2.0.0, < 2.2.0
CVE-2026-27497
8.8
1%
Feb 25
n8n has Potential Remote Code Execution via Merge Node
Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1
CVE-2026-25056
8.8
1%
Feb 4
n8n Arbitrary File Write leading to RCE in n8n Merge Node
Affected: < 1.118.0; < 2.4.0
CVE-2025-65964
8.8
1%
Dec 8
n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook
Affected: >= 0.123.1, < 1.119.2
CVE-2025-62726
8.8
1%
Oct 30
n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook
Affected: < 1.113.0
CVE-2026-118645
New
8.7–Oct 28
n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter
Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5
CVE-2026-103253
8.7
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-103247
8.5
0%
Oct 1
n8n before 1.123.80 Credential Tampering via Duplicate Node IDs
Affected: before 1.123.80
CVE-2026-49444
8.5
0%
Jun 23
n8n: Python sandbox escape
Affected: < 1.123.48; >= 2.0.0-rc.0, < 2.21.8; >= 2.22.0, < 2.22.4
CVE-2026-54312
8.5
0%
Jun 23
n8n: Microsoft SQL Node Prototype Pollution
Affected: < 2.24.0
CVE-2026-118649
New
8.3–Oct 28
n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables
Affected: 2.44.0 before 2.44.1; before 2.43.5
CVE-2026-72768
8.3
0%
Aug 11
n8n before 2.32.1 SSRF Protection Bypass via MCP Client
Affected: before 2.32.1; before 2.31.5
CVE-2026-118647
New
8.2–Oct 28
n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data
Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5
CVE-2026-118643
New
8.2–Oct 28
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data
Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5
CVE-2026-110843
8.2
0%
Oct 14
n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint
Affected: before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-103250
8.1
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memory
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-72769
8.1
1%
Aug 11
n8n before 1.123.67 Prototype Pollution via VM Expression Engine
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-65596
8.1
0%
Jul 22
n8n before 1.123.64 Credential Exfiltration via GraphQL Node
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-45732
8.1
0%
Jun 23
n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints
Affected: < 1.123.43; >= 2.0.0-rc.0, < 2.20.7; >= 2.21.0, < 2.21.1
CVE-2026-25055
8.1
2%
Feb 4
n8n Arbitrary File Write on Remote Systems via SSH Node
Affected: < 1.123.12; < 2.4.0
CVE-2026-118644
New
7.7–Oct 28
n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance
Affected: 2.42.0 before 2.42.2; before 2.41.5
Page 1 of 2 · 97 total
12