vciy

CVEs we hold for N8n-io

Records whose assigning authority named N8n-io as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-92588n8n before 1.123.76 Improper Authorization via Source Control Pushn8n-io n8n
CVE-2026-92587n8n before 1.123.76 Sandbox Escape via Git Relative URLn8n-io n8n
CVE-2026-86996n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policyn8n-io n8n
CVE-2026-86995n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Readn8n-io n8n
CVE-2026-86994n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filtern8n-io n8n
CVE-2026-86993n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Checkn8n-io n8n
CVE-2026-86085n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpointsn8n-io n8n
CVE-2026-86084n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessionsn8n-io n8n
CVE-2026-86083n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Executionn8n-io n8n
CVE-2026-86082n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Noden8n-io n8n
CVE-2026-86081n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Pathn8n-io n8n
CVE-2026-86080n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Openn8n-io n8n
CVE-2026-86079n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiersn8n-io n8n
CVE-2026-86078n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Servicen8n-io n8n
CVE-2026-86077n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocketn8n-io n8n
CVE-2026-86076n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Executionn8n-io n8n
CVE-2026-86075n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpointn8n-io n8n
CVE-2026-86074n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Contentn8n-io n8n
CVE-2026-86073n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitutionn8n-io n8n
CVE-2026-85173n8n before 2.36.2 Missing Authorization via Insights APIn8n-io n8n
CVE-2026-85172n8n before 2.34.1 SSRF via Request Helper URI Validation Bypassn8n-io n8n
CVE-2026-85171n8n before 1.123.73 Credential Exposure via Error Loggingn8n-io n8n
CVE-2026-85170n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodesn8n-io n8n
CVE-2026-85169n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leakn8n-io n8n
CVE-2026-85168n8n before 1.123.73 Remote Code Execution via Git Noden8n-io n8n
CVE-2026-85167n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodesn8n-io n8n
CVE-2026-85166n8n before 2.36.2 Credential Exfiltration via Workflow Tool Noden8n-io n8n
CVE-2026-85165n8n before 2.36.2 Expression Sandbox Bypass via SpreadElementn8n-io n8n
CVE-2026-77085n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tooln8n-io n8n
CVE-2026-77084n8n before 1.123.69 Remote Code Execution via Git Node Configuration Valuesn8n-io n8n
CVE-2026-77083n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollutionn8n-io n8n
CVE-2026-77082n8n before 1.123.69 ReDoS via Filter and Switch Noden8n-io n8n
CVE-2026-77081n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Noden8n-io n8n
CVE-2026-77080n8n before 1.123.69 Arbitrary File Read and Write via Snowflaken8n-io n8n
CVE-2026-77079n8n before 2.34.1 Authorization Bypass via Custom Role Deletionn8n-io n8n
CVE-2026-77077n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollutionn8n-io n8n
CVE-2026-77076n8n before 1.123.69 Credential Leak via GraphQL Node Errorn8n-io n8n
CVE-2026-77075n8n before 1.123.69 Expression Injection via Resource Locatorn8n-io n8n
CVE-2026-77074n8n before 1.123.69 SSRF via Edit Image Noden8n-io n8n
CVE-2026-77073n8n before 2.34.1 Cross-Project Credential Access via MCPn8n-io n8n
CVE-2026-77072n8n before 1.123.69 Stored XSS via Form Completion Pagen8n-io n8n
CVE-2026-77071n8n before 1.123.69 PostgREST Filter Injection via Supabasen8n-io n8n
CVE-2026-77070n8n before 1.123.69 NoSQL Injection via MongoDB Noden8n-io n8n
CVE-2026-77069n8n before 1.123.69 SSRF Protection Bypass via OAuth2n8n-io n8n
CVE-2026-77068n8n before 2.34.1 Remote Code Execution via Path Traversaln8n-io n8n
CVE-2026-72775n8n before 1.123.67 SQL Injection via PostgresTrigger Noden8n-io n8n
CVE-2026-72774n8n before 1.123.67 Authentication Bypass via HTTP Request Noden8n-io n8n
CVE-2026-72773n8n before 2.32.1 Path Traversal via computer-use search_filesn8n-io n8n
CVE-2026-72772n8n before 2.32.1 Authentication Bypass via Token Exchangen8n-io n8n
CVE-2026-72771n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodesn8n-io n8n
CVE-2026-72770n8n before 1.123.67 Path Traversal via Git Node Operationsn8n-io n8n
CVE-2026-72769n8n before 1.123.67 Prototype Pollution via VM Expression Enginen8n-io n8n
CVE-2026-72768n8n before 2.32.1 SSRF Protection Bypass via MCP Clientn8n-io n8n
CVE-2026-72767n8n before 1.123.67 Remote Code Execution via Git noden8n-io n8n
CVE-2026-72766n8n before 1.123.67 Arbitrary File Read via Send Email Noden8n-io n8n
CVE-2026-72765n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escapen8n-io n8n
CVE-2026-72764n8n before 1.123.67 Module Cache Poisoning via Code Noden8n-io n8n
CVE-2026-72763n8n before 1.123.67 Credential Exfiltration via Sub-Workflown8n-io n8n
CVE-2026-72762n8n before 1.123.67 Arbitrary File Write via Edit Image Noden8n-io n8n
CVE-2026-72750n8n before 1.123.67 SQL Injection via executeQuery Operationn8n-io n8n
CVE-2026-72749n8n before 1.123.67 Prototype Pollution via Edit Fieldsn8n-io n8n
CVE-2026-71539n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Executionn8n-io n8n
CVE-2026-65599n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Headern8n-io n8n
CVE-2026-65598n8n before 1.123.64 Remote Code Execution via Git Clonen8n-io n8n
CVE-2026-65597n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframen8n-io n8n
CVE-2026-65596n8n before 1.123.64 Credential Exfiltration via GraphQL Noden8n-io n8n
CVE-2026-65595n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchangen8n-io n8n
CVE-2026-65594n8n before 2.30.1 Missing OAuth Authorization Checkn8n-io n8n
CVE-2026-65593n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parametersn8n-io n8n
CVE-2026-65592n8n before 1.123.64 Stored DOM XSS via cachedResultUrln8n-io n8n
CVE-2026-65591n8n before 1.123.64 Sanitizer Bypass Remote Code Executionn8n-io n8n
CVE-2026-65590n8n before 2.30.1 Shell Sandbox Bypass on Linux Windowsn8n-io n8n
CVE-2026-65589n8n before 1.123.64 Credential Exposure via LLM Node Execution Datan8n-io n8n
CVE-2026-65016n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Rolen8n-io n8n
CVE-2026-65015n8n before 2.30.1 Privilege Escalation via run_node_tooln8n-io n8n
CVE-2026-65014n8n before 2.28.0 Authentication Bypass via test-webhookn8n-io n8n
CVE-2026-59209n8n: Shared Credential Header Leak via HTTP Request Pagination Expressionn8n-io n8n
CVE-2026-59208n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolutionn8n-io n8n
CVE-2026-59207n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connectorn8n-io n8n
CVE-2026-59206n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumerationn8n-io n8n
CVE-2026-54314n8n: Denial of Service via ZIP decompression in webhook workflown8n-io n8n
CVE-2026-54313n8n: NoSQL Injection in MongoDB Node Find And Replace Operationn8n-io n8n
CVE-2026-54312n8n: Microsoft SQL Node Prototype Pollutionn8n-io n8n
CVE-2026-54311n8n: Merge Node SQL Mode Prototype Pollutionn8n-io n8n
CVE-2026-54310n8n: SQL Injection in Postgres v1/TimesclaeDB Nodesn8n-io n8n
CVE-2026-54309n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessionsn8n-io n8n
CVE-2026-54308n8n: Missing Token Validation on Microsoft Agent 365 Trigger Noden8n-io n8n
CVE-2026-54307n8n: Credential Exfiltration via Permission Bypassn8n-io n8n
CVE-2026-54306n8n: Prototype Pollution enables confused-deputy execution via public webhooksn8n-io n8n
CVE-2026-54305n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpointsn8n-io n8n
CVE-2026-54304n8n: SecurityScorecard Node Leaks API Token to User-Controlled Hostn8n-io n8n
CVE-2026-54303n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpointsn8n-io n8n
CVE-2026-54302n8n: Stored XSS in Chat Trigger Noden8n-io n8n
CVE-2026-54301n8n: Same-Origin XSS in Respond to Webhook Noden8n-io n8n
CVE-2026-49465n8n: Git Node Clone and Push Operations Bypass File Sandboxn8n-io n8n
CVE-2026-49444n8n: Python sandbox escapen8n-io n8n
CVE-2026-45732n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpointsn8n-io n8n
CVE-2026-44792n8n: Source Control Pull SQL Injectionn8n-io n8n
CVE-2026-44791n8n: XML Node Prototype Pollution Patch Bypassn8n-io n8n
CVE-2026-44790n8n: Arbitrary File Read via Git Noden8n-io n8n
CVE-2026-44789n8n: HTTP Request Node Pagination Prototype Pollution to RCEn8n-io n8n
CVE-2026-42237n8n: SQL Injection in Snowflake and MySQL Nodesn8n-io n8n
CVE-2026-42236n8n: Unauthenticated Denial of Service via MCP Client Registrationn8n-io n8n
CVE-2026-42235n8n: XSS via MCP OAuth clientn8n-io n8n
CVE-2026-42234n8n: Python Task Runner Sandbox Escapen8n-io n8n
CVE-2026-42233n8n: SQL Injection in Oracle Database Node via Limit Fieldn8n-io n8n
CVE-2026-42232n8n: XML Node Prototype Pollution to RCEn8n-io n8n
CVE-2026-42231n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCEn8n-io n8n
CVE-2026-42230n8n: Open Redirect in MCP OAuth Consent Flown8n-io n8n
CVE-2026-42229n8n: SQL Injection in SeaTable Noden8n-io n8n
CVE-2026-42228n8n: Hijacking of Unauthenticated Chat Executionn8n-io n8n
CVE-2026-42227n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosuren8n-io n8n
CVE-2026-42226n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replayn8n-io n8n
CVE-2026-33751n8n Vulnerable to LDAP Filter Injection in LDAP Noden8n-io n8n
CVE-2026-33749n8n Vulnerable to XSS via Binary Data Inline HTML Renderingn8n-io n8n
CVE-2026-33724n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=non8n-io n8n
CVE-2026-33722n8n Has External Secrets Authorization Bypass in Credential Savingn8n-io n8n
CVE-2026-33720n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACKn8n-io n8n
CVE-2026-33713n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expressionn8n-io n8n
CVE-2026-33696n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCEn8n-io n8n
CVE-2026-33665n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeovern8n-io n8n
CVE-2026-33663n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Editionn8n-io n8n
CVE-2026-33660n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Moden8n-io n8n
CVE-2026-27578n8n Vulnerable to Stored XSS via Various Nodesn8n-io n8n
CVE-2026-27577n8n: Expression Sandbox Escape Leads to RCEn8n-io n8n
CVE-2026-27498n8n has Arbitrary Command Execution via File Write and Git Operationsn8n-io n8n
CVE-2026-27497n8n has Potential Remote Code Execution via Merge Noden8n-io n8n
CVE-2026-27496n8n has In-Process Memory Disclosure in its Task Runnern8n-io n8n
CVE-2026-27495n8n has a Sandbox Escape in its JavaScript Task Runnern8n-io n8n
CVE-2026-27494n8n has Arbitrary File Read via Python Code Node Sandbox Escapen8n-io n8n
CVE-2026-27493n8n has Unauthenticated Expression Evaluation via Form Noden8n-io n8n
CVE-2026-25631Domain allowlist bypass enables credential exfiltrationn8n-io n8n
CVE-2026-25115n8n is vulnerable to Python sandbox escapen8n-io n8n
CVE-2026-25056n8n Arbitrary File Write leading to RCE in n8n Merge Noden8n-io n8n
CVE-2026-25055n8n Arbitrary File Write on Remote Systems via SSH Noden8n-io n8n
CVE-2026-25054n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UIn8n-io n8n
CVE-2026-25053n8n is Vulnerable to OS Command Injection in Git Noden8n-io n8n
CVE-2026-25052n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Usersn8n-io n8n
CVE-2026-25051n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSSn8n-io n8n
CVE-2026-25049n8n Has an Expression Escape Vulnerability Leading to RCEn8n-io n8n
CVE-2026-21894n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooksn8n-io n8n
CVE-2026-21893n8n Vulnerable to Command Injection in Community Package Installationn8n-io n8n
CVE-2026-21877n8n is vulnerable to Remote Code Execution via Arbitrary File Writen8n-io n8n
CVE-2026-21858n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handlingn8n-io n8n
CVE-2025-68949n8n has a Webhook Node IP Whitelist Bypass via Partial String Matchingn8n-io n8n
CVE-2025-68697Self-hosted n8n has Legacy Code node that enables arbitrary file read/writen8n-io n8n
CVE-2025-68668n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Noden8n-io n8n
CVE-2025-68613n8n Vulnerable to Remote Code Execution via Expression Injectionn8n-io n8n
CVE-2025-65964n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hookn8n-io n8n
CVE-2025-62726n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hookn8n-io n8n
CVE-2025-61917n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runnern8n-io n8n
CVE-2025-61914n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandboxn8n-io n8n
CVE-2025-58177n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parametern8n-io n8n
CVE-2025-57749n8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted filesn8n-io n8n
CVE-2025-52554n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflowsn8n-io n8n
CVE-2025-52478Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/sourcen8n-io n8n
CVE-2025-49595n8n Vulnerable to Denial of Service via Malformed Binary Data Requestsn8n-io n8n
CVE-2025-49592n8n Login Flow has Open Redirect Vulnerabilityn8n-io n8n
CVE-2025-46343n8n Vulnerable to Stored XSS through Attachments View Endpointn8n-io n8n

159 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.