Login Request a demo
N8
Product
n8n
by n8n-io · last CVE Oct 28, 2026
On CISA KEVExploited in the wild
197
CVEs
1
On KEV
10.0
Max CVSS
45
New 30D
Vulnerabilities197In the news6Timeline
Severity mix
Critical 28High 97Medium 72Low 0
Severity
All severities197Critical28High97Medium72Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add n8n to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-103258
6.8
0%
Oct 1
n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation
Affected: before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-59208
6.8
0%
Jul 9
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
Affected: >= 2.28.0, < 2.28.1; < 2.27.4
CVE-2026-118646
New
6.5–Oct 28
n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node
Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5
CVE-2026-86077
6.5
0%
Sep 8
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Affected: < 2.37.7; >= 2.38.0, < 2.38.2
CVE-2026-86078
6.5
1%
Sep 8
n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
Affected: < 2.37.7; >= 2.38.0, < 2.38.2
CVE-2026-86079
6.5
0%
Sep 8
n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-86082
6.5
0%
Sep 8
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-85171
6.5
1%
Sep 3
n8n before 1.123.73 Credential Exposure via Error Logging
Affected: before 1.123.73; before 2.36.2; before 2.35.4
CVE-2026-85170
6.5
0%
Sep 3
n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes
Affected: before 1.123.73; before 2.36.2; before 2.35.4
CVE-2026-85167
6.5
0%
Sep 3
n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
Affected: before 2.36.2; before 2.35.4
CVE-2026-85166
6.5
0%
Sep 3
n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node
Affected: before 2.36.2; before 2.35.4
CVE-2026-77085
6.5
0%
Aug 20
n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool
Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77076
6.5
0%
Aug 20
n8n before 1.123.69 Credential Leak via GraphQL Node Error
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-77074
6.5
0%
Aug 20
n8n before 1.123.69 SSRF via Edit Image Node
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-72774
6.5
0%
Aug 11
n8n before 1.123.67 Authentication Bypass via HTTP Request Node
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72771
6.5
0%
Aug 11
n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes
Affected: before 2.32.1; before 2.31.5
CVE-2026-72770
6.5
1%
Aug 11
n8n before 1.123.67 Path Traversal via Git Node Operations
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72763
6.5
0%
Aug 11
n8n before 1.123.67 Credential Exfiltration via Sub-Workflow
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-72749
6.5
1%
Aug 11
n8n before 1.123.67 Prototype Pollution via Edit Fields
Affected: before 1.123.67; before 2.32.1; before 2.31.5
CVE-2026-65599
6.5
0%
Jul 22
n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-65594
6.5
0%
Jul 22
n8n before 2.30.1 Missing OAuth Authorization Check
Affected: before 2.30.1; before 2.29.8
CVE-2026-65589
6.5
0%
Jul 22
n8n before 1.123.64 Credential Exposure via LLM Node Execution Data
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-59209
6.5
0%
Jul 9
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
Affected: >= 2.28.0, < 2.28.1; >= 2.0.0-rc.0, < 2.27.4; < 1.123.61
CVE-2026-59207
6.5
0%
Jul 9
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
Affected: >= 2.28.0, < 2.28.1; < 2.27.4
CVE-2026-42228
6.5
0%
May 4
n8n: Hijacking of Unauthenticated Chat Execution
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-42227
6.5
0%
May 4
n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-33663
6.5
0%
Mar 25
n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0
CVE-2026-27496
6.5
0%
Mar 25
n8n has In-Process Memory Disclosure in its Task Runner
Affected: < 1.123.22; >= 2.0.0-rc.0, < 2.9.3; >= 2.10.0, < 2.10.1
CVE-2026-25631
6.5
0%
Feb 6
Domain allowlist bypass enables credential exfiltration
Affected: < 1.121.0
CVE-2026-21894
6.5
0%
Jan 8
n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks
Affected: >= 0.150.0, < 2.2.2
CVE-2026-85172
6.4
0%
Sep 3
n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass
Affected: before 2.34.1; before 2.33.4
CVE-2026-54306
6.4
0%
Jun 23
n8n: Prototype Pollution enables confused-deputy execution via public webhooks
Affected: >= 2.26.0, < 2.26.2; < 2.25.7
CVE-2026-110852
6.3
0%
Oct 14
n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution
Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-103254
6.3
0%
Oct 1
n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation
Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1
CVE-2026-110851
6.1
0%
Oct 14
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint
Affected: before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-110841
6.1
0%
Oct 14
n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval
Affected: before 2.41.4
CVE-2026-42230
6.1
0%
May 4
n8n: Open Redirect in MCP OAuth Consent Flow
Affected: < 1.123.32; >= 2.17.0, < 2.17.4; >= 2.18.0, < 2.18.1
CVE-2026-110848
6.0
0%
Oct 14
n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge
Affected: before 1.123.83; 2.0.0 before 2.41.4; 2.42.0 before 2.42.1
CVE-2026-118677
New
5.9–Oct 28
n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
Affected: 2.42.0 before 2.42.1; before 2.41.4
CVE-2026-77083
5.9
0%
Aug 20
n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution
Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4
CVE-2026-86084
5.5
0%
Sep 8
n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76
CVE-2026-118640
New
5.4–Oct 28
n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass
Affected: before 1.123.85; 2.44.0 before 2.44.1; 2.0.0 before 2.43.5
CVE-2026-86996
5.4
0%
Sep 8
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
Affected: < 2.37.7; >= 2.38.0, < 2.38.2
CVE-2026-65597
5.4
0%
Jul 22
n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-65593
5.4
0%
Jul 22
n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-65592
5.4
0%
Jul 22
n8n before 1.123.64 Stored DOM XSS via cachedResultUrl
Affected: before 1.123.64; before 2.30.1; before 2.29.8
CVE-2026-54302
5.4
0%
Jun 23
n8n: Stored XSS in Chat Trigger Node
Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2
CVE-2026-54301
5.4
0%
Jun 23
n8n: Same-Origin XSS in Respond to Webhook Node
Affected: < 1.123.55; >= 2.0.0-rc.0, < 2.25.7; >= 2.26.0, < 2.26.2
CVE-2026-54303
5.4
0%
Jun 23
n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints
Affected: < 2.24.0
CVE-2026-27578
5.4
0%
Feb 25
n8n Vulnerable to Stored XSS via Various Nodes
Affected: < 1.123.22; >= 2.0.0, < 2.9.3; >= 2.10.0, < 2.10.1
Page 1 of 2 · 72 total
12