# n8n (npm) vulnerabilities 158 known vulnerabilities (24 critical, 60 high, 74 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 2.46.6 (Nov 4, 2026): no advisory affects it - Newest unaffected release: 2.47.2 (Nov 4, 2026) - Weekly downloads: 159.8K - Dependents: 16 - Releases: 500+ since 1.110.2 (Sep 19, 2025) - Registry: https://www.npmjs.com/package/n8n - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-86075: 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86076: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86077: 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86078: 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86079: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86080: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86081: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86082: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86083: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86084: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86085: 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86993: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86994: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86995: 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86996: 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86074: 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it) - CVE-2026-86073: 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 (2.38.1 is outside it) - CVE-2026-71539: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-72775: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72774: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72773: 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72772: 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72771: 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72770: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72769: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72768: 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72767: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72766: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72765: 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72764: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72763: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72762: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72750: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-72749: 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it) - CVE-2026-65599: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65598: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65597: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65596: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65595: 1.109.2-exp.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65594: 1.109.2-exp.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65593: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65592: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65591: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65590: 1.109.2-exp.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65589: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65016: 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65015: 1.109.2-exp.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it) - CVE-2026-65014: 1.109.2-exp.0 to 2.27.3 (2.27.4 is outside it) - CVE-2026-59259: 1.109.2-exp.0 to 1.123.60 (1.123.61 is outside it); 2.0.0-rc.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it) - CVE-2026-59254: 1.109.2-exp.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it) - CVE-2026-56353: 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it) - CVE-2026-56352: 1.109.2-exp.0 to 2.19.2 (2.19.3 is outside it) - CVE-2026-56349: 1.109.2-exp.0 to 2.9.4 (2.10.0 is outside it) - CVE-2026-58661: 1.109.2-exp.0 to 1.123.57 (1.123.58 is outside it); 2.0.0 to 2.27.5 (2.28.0 is outside it) - CVE-2026-56354: 1.109.2-exp.0 to 1.123.23 (1.123.24 is outside it); 2.0.0-rc.0 to 2.10.3 (2.10.4 is outside it); 2.11.0 to 2.11.4 (2.12.0 is outside it) - CVE-2026-59209: 1.109.2-exp.0 to 1.123.60 (1.123.61 is outside it); 2.0.0-rc.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it) - CVE-2026-59206: 1.109.2-exp.0 to 1.123.60 (1.123.61 is outside it); 2.0.0-rc.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it) - CVE-2026-59208: 1.109.2-exp.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it) - CVE-2026-59207: 1.109.2-exp.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it) - CVE-2026-59257: 1.109.2-exp.0 to 1.123.60 (1.123.61 is outside it); 2.0.0-rc.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it) - CVE-2026-59253: 1.109.2-exp.0 to 2.27.5 (2.28.0 is outside it) - CVE-2026-56778: 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-56776: 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-56775: 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-56360: 1.109.2-exp.0 to 1.123.17 (1.123.18 is outside it); 2.0.0 to 2.6.1 (2.6.2 is outside it) - CVE-2026-56359: 1.109.2-exp.0 to 2.6.3 (2.6.4 is outside it); 2.7.0 to 2.7.5 (2.8.0 is outside it) - CVE-2025-71380: 1.109.2-exp.0 to 1.114.4 (1.115.0 is outside it) - CVE-2026-56777: 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-56356: 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it) - CVE-2026-56350: 1.109.2-exp.0 to 2.7.5 (2.8.0 is outside it) - CVE-2026-56358: 1.109.2-exp.0 to 1.123.24 (1.123.25 is outside it); 2.0.0-rc.0 to 2.11.1 (2.11.2 is outside it) - CVE-2026-56351: 1.109.2-exp.0 to 2.3.6 (2.4.0 is outside it) - CVE-2026-44792: 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 (2.21.1 is outside it) - CVE-2026-44791: 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 to 2.22.0 (2.22.1 is outside it) - CVE-2026-44790: 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 to 2.22.0 (2.22.1 is outside it) - CVE-2026-44789: 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 to 2.22.0 (2.22.1 is outside it) - CVE-2026-45732: 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 (2.21.1 is outside it) - CVE-2026-49444: 1.109.2-exp.0 to 1.123.47 (1.123.48 is outside it); 2.0.0-rc.0 to 2.21.7 (2.21.8 is outside it); 2.22.0 to 2.22.4-exp.0 (2.22.4 is outside it) - CVE-2026-49465: 1.109.2-exp.0 to 1.123.47 (1.123.48 is outside it); 2.0.0-rc.0 to 2.21.7 (2.21.8 is outside it); 2.22.0 to 2.22.4-exp.0 (2.22.4 is outside it) - CVE-2026-54304: 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 (2.26.1 is outside it) - CVE-2026-54307: 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-54302: 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-54305: 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-54301: 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-54306: 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-54308: 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-54311: 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-54310: 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-54309: 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it) - CVE-2026-54314: 1.109.2-exp.0 to 2.23.4 (2.24.0 is outside it) - CVE-2026-54312: 1.109.2-exp.0 to 2.23.4 (2.24.0 is outside it) - CVE-2026-54303: 1.109.2-exp.0 to 2.23.4 (2.24.0 is outside it) - CVE-2026-54313: 1.109.2-exp.0 to 2.23.4 (2.24.0 is outside it) - CVE-2026-56357: 1.109.2-exp.0 to 1.123.14 (1.123.15 is outside it); 2.0.0 to 2.4.8 (2.5.0 is outside it) - CVE-2026-56348: 1.109.2-exp.0 to 2.19.5 (2.20.0 is outside it) - CVE-2026-42237: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42236: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42235: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.17.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42234: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.17.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42233: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42232: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.17.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42231: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.17.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42230: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42229: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42228: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42227: 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it) - CVE-2026-42226: 1.109.2-exp.0 to 1.123.32 (1.123.33 is outside it); 2.17.0 to 2.17.4 (2.17.5 is outside it) - CVE-2026-33751: 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it) - CVE-2026-33749: 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it) - CVE-2026-33724: 1.109.2-exp.0 to 2.4.8 (2.5.0 is outside it) - CVE-2026-33722: 1.109.2-exp.0 to 1.123.22 (1.123.23 is outside it); 2.0.0-rc.0 to 2.6.3 (2.6.4 is outside it) - CVE-2026-33720: 1.109.2-exp.0 to 2.7.5 (2.8.0 is outside it) - CVE-2026-33713: 1.109.2-exp.0 to 1.123.25 (1.123.26 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it) - CVE-2026-33696: 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it) - CVE-2026-33665: 1.109.2-exp.0 to 1.120.4 (1.121.0 is outside it); 2.0.0-rc.0 to 2.3.6 (2.4.0 is outside it) - CVE-2026-33663: 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it) - CVE-2026-33660: 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it) - CVE-2026-27496: 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0-rc.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it) - CVE-2026-27498: 1.109.2-exp.0 to 1.123.7 (1.123.8 is outside it); 2.0.0 to 2.1.5 (2.2.0 is outside it) - CVE-2026-27578: 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it) - CVE-2026-27577: 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it) - CVE-2026-27497: 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it) - CVE-2026-27495: 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it) - CVE-2026-27494: 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it) - CVE-2026-27493: 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it) - CVE-2026-25631: 1.109.2-exp.0 to 1.120.4 (1.121.0 is outside it) - CVE-2026-21893: 1.109.2-exp.0 to 1.120.2 (1.120.3 is outside it) - CVE-2026-25115: 1.109.2-exp.0 to 2.4.8-exp.0 (2.4.8 is outside it) - CVE-2026-25056: 1.109.2-exp.0 to 1.117.3 (1.118.0 is outside it); 2.0.0 to 2.3.6 (2.4.0 is outside it) - CVE-2026-25055: 1.109.2-exp.0 to 1.123.11 (1.123.12 is outside it); 2.0.0 to 2.3.6 (2.4.0 is outside it) - CVE-2026-25054: 1.109.2-exp.0 to 1.123.8 (1.123.9 is outside it); 2.0.0 to 2.2.0 (2.2.1 is outside it) - CVE-2026-25053: 1.109.2-exp.0 to 1.123.9 (1.123.10 is outside it); 2.0.0 to 2.4.8 (2.5.0 is outside it) - CVE-2026-25052: 1.109.2-exp.0 to 1.123.17 (1.123.18 is outside it); 2.0.0 to 2.4.8 (2.5.0 is outside it) - CVE-2026-25051: 1.109.2-exp.0 to 1.122.4 (1.122.5 is outside it); 1.123.0 to 1.123.1 (1.123.2 is outside it) - CVE-2025-61917: 1.109.2-exp.0 to 1.114.2 (1.114.3 is outside it) - CVE-2026-25049: 1.109.2-exp.0 to 1.123.16 (1.123.17 is outside it); 2.0.0 to 2.5.1 (2.5.2 is outside it) - CVE-2026-1470: 1.109.2-exp.0 to 1.123.16 (1.123.17 is outside it); 2.0.0 to 2.4.4 (2.4.5 is outside it); 2.5.0 (2.5.1 is outside it) - CVE-2026-0863: 1.109.2-exp.0 to 1.123.13 (1.123.14 is outside it); 2.0.0 to 2.3.4 (2.3.5 is outside it); 2.4.0 to 2.4.1 (2.4.2 is outside it) - CVE-2025-68949: 1.109.2-exp.0 to 2.1.5 (2.2.0 is outside it) - CVE-2026-21894: 1.109.2-exp.0 to 2.2.1 (2.2.2 is outside it) - CVE-2026-21877: 1.109.2-exp.0 to 1.121.3-exp.0 (1.121.3 is outside it) - CVE-2026-21858: 1.109.2-exp.0 to 1.120.4 (1.121.0 is outside it) - CVE-2025-68697: 1.109.2-exp.0 to 2.0.0-rc.4 (2.0.0 is outside it) - CVE-2025-68668: 1.109.2-exp.0 to 2.0.0-rc.4 (2.0.0 is outside it) - CVE-2025-61914: 1.109.2-exp.0 to 1.113.3 (1.114.0 is outside it) - CVE-2025-68613: 1.109.2-exp.0 to 1.120.3 (1.120.4 is outside it); 1.121.0 (1.121.1 is outside it) - CVE-2025-65964: 1.109.2-exp.0 to 1.119.1 (1.119.2 is outside it) - CVE-2025-62726: 1.109.2-exp.0 to 1.112.6 (1.113.0 is outside it) - CVE-2025-58177: no published release is affected - CVE-2025-57749: no published release is affected - CVE-2025-52478: no published release is affected - CVE-2025-52554: no published release is affected - CVE-2025-49595: no published release is affected - CVE-2025-49592: no published release is affected - CVE-2025-46343: no published release is affected - CVE-2023-27564: no published release is affected - CVE-2023-27563: no published release is affected - CVE-2023-27562: no published release is affected Older releases aren't stored, so the earliest spans may start sooner. ## Advisories (158) ### [CVE-2026-86075](https://cve.now/CVE-2026-86075): n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint - Severity: High 8.7 - Published: Sep 8, 2026 - Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7. - Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 68% of n8n downloads last week were affected versions (116.3K). ### [CVE-2026-86076](https://cve.now/CVE-2026-86076): n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution - Severity: High 8.7 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86077](https://cve.now/CVE-2026-86077): n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket - Severity: Medium 6.3 - Published: Sep 8, 2026 - Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7. - Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 68% of n8n downloads last week were affected versions (116.3K). ### [CVE-2026-86078](https://cve.now/CVE-2026-86078): n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service - Severity: Medium 6.0 - Published: Sep 8, 2026 - Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7. - Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 68% of n8n downloads last week were affected versions (116.3K). ### [CVE-2026-86079](https://cve.now/CVE-2026-86079): n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers - Severity: Medium 6.3 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86080](https://cve.now/CVE-2026-86080): n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open - Severity: Medium 6.3 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86081](https://cve.now/CVE-2026-86081): n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path - Severity: High 7.1 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86082](https://cve.now/CVE-2026-86082): n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node - Severity: High 7.1 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86083](https://cve.now/CVE-2026-86083): n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution - Severity: High 7.7 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86084](https://cve.now/CVE-2026-86084): n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions - Severity: Medium 6.0 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86085](https://cve.now/CVE-2026-86085): n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints - Severity: Medium 5.1 - Published: Sep 8, 2026 - Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7. - Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 68% of n8n downloads last week were affected versions (116.3K). ### [CVE-2026-86993](https://cve.now/CVE-2026-86993): n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check - Severity: Medium 5.9 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86994](https://cve.now/CVE-2026-86994): n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter - Severity: Medium 5.3 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86995](https://cve.now/CVE-2026-86995): n8n: Git Node branch.\.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read - Severity: Medium 5.3 - Published: Sep 8, 2026 - Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7. - Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 67% of n8n downloads last week were affected versions (113.7K). ### [CVE-2026-86996](https://cve.now/CVE-2026-86996): n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy - Severity: Medium 5.3 - Published: Sep 8, 2026 - Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7. - Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 68% of n8n downloads last week were affected versions (116.3K). ### [CVE-2026-86074](https://cve.now/CVE-2026-86074): n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content - Severity: Medium 5.9 - Published: Sep 8, 2026 - Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7. - Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 68% of n8n downloads last week were affected versions (116.3K). ### [CVE-2026-86073](https://cve.now/CVE-2026-86073): n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution - Severity: Medium 5.9 - Published: Sep 8, 2026 - Affected: from 2.38.0, fixed in 2.38.1; fixed in 2.37.7. - Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.1 (released Sep 1, 2026, 7 days before disclosure). - The latest release, 2.46.6, is not affected. - 68% of n8n downloads last week were affected versions (116.1K). ### [CVE-2026-71539](https://cve.now/CVE-2026-71539): n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution - Severity: High 8.9 - Published: Aug 18, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 41 days before disclosure), 2.29.8 (released Jul 8, 2026, 41 days before disclosure) and 2.30.1 (released Jul 8, 2026, 41 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.6K). ### [CVE-2026-72775](https://cve.now/CVE-2026-72775): n8n before 1.123.67 SQL Injection via PostgresTrigger Node - Severity: Medium 5.8 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72774](https://cve.now/CVE-2026-72774): n8n before 1.123.67 Authentication Bypass via HTTP Request Node - Severity: High 7.1 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72773](https://cve.now/CVE-2026-72773): n8n before 2.32.1 Path Traversal via computer-use search\_files - Severity: Medium 4.9 - Published: Aug 11, 2026 - Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5. - Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 61% of n8n downloads last week were affected versions (103.7K). ### [CVE-2026-72772](https://cve.now/CVE-2026-72772): n8n before 2.32.1 Authentication Bypass via Token Exchange - Severity: High 8.9 - Published: Aug 11, 2026 - Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5. - Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 61% of n8n downloads last week were affected versions (103.7K). ### [CVE-2026-72771](https://cve.now/CVE-2026-72771): n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes - Severity: High 7.1 - Published: Aug 11, 2026 - Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5. - Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 61% of n8n downloads last week were affected versions (103.7K). ### [CVE-2026-72770](https://cve.now/CVE-2026-72770): n8n before 1.123.67 Path Traversal via Git Node Operations - Severity: High 7.1 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72769](https://cve.now/CVE-2026-72769): n8n before 1.123.67 Prototype Pollution via VM Expression Engine - Severity: Medium 6.1 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72768](https://cve.now/CVE-2026-72768): n8n before 2.32.1 SSRF Protection Bypass via MCP Client - Severity: Medium 6.4 - Published: Aug 11, 2026 - Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5. - Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 61% of n8n downloads last week were affected versions (103.7K). ### [CVE-2026-72767](https://cve.now/CVE-2026-72767): n8n before 1.123.67 Remote Code Execution via Git node - Severity: High 8.7 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72766](https://cve.now/CVE-2026-72766): n8n before 1.123.67 Arbitrary File Read via Send Email Node - Severity: High 8.2 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72765](https://cve.now/CVE-2026-72765): n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape - Severity: High 8.7 - Published: Aug 11, 2026 - Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5. - Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 61% of n8n downloads last week were affected versions (103.7K). ### [CVE-2026-72764](https://cve.now/CVE-2026-72764): n8n before 1.123.67 Module Cache Poisoning via Code Node - Severity: Medium 5.8 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72763](https://cve.now/CVE-2026-72763): n8n before 1.123.67 Credential Exfiltration via Sub-Workflow - Severity: High 7.2 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72762](https://cve.now/CVE-2026-72762): n8n before 1.123.67 Arbitrary File Write via Edit Image Node - Severity: High 7.7 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72750](https://cve.now/CVE-2026-72750): n8n before 1.123.67 SQL Injection via executeQuery Operation - Severity: Medium 5.3 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-72749](https://cve.now/CVE-2026-72749): n8n before 1.123.67 Prototype Pollution via Edit Fields - Severity: High 7.1 - Published: Aug 11, 2026 - Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5. - Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-65599](https://cve.now/CVE-2026-65599): n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header - Severity: Medium 5.1 - Published: Jul 22, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.6K). ### [CVE-2026-65598](https://cve.now/CVE-2026-65598): n8n before 1.123.64 Remote Code Execution via Git Clone - Severity: High 8.9 - Published: Jul 22, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.6K). ### [CVE-2026-65597](https://cve.now/CVE-2026-65597): n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe - Severity: High 8.2 - Published: Jul 22, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.6K). ### [CVE-2026-65596](https://cve.now/CVE-2026-65596): n8n before 1.123.64 Credential Exfiltration via GraphQL Node - Severity: Medium 5.1 - Published: Jul 22, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.5K). ### [CVE-2026-65595](https://cve.now/CVE-2026-65595): n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange - Severity: High 8.9 - Published: Jul 22, 2026 - Affected: from 2.30.0, fixed in 2.30.1; fixed in 2.29.8. - Fixed in 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-65594](https://cve.now/CVE-2026-65594): n8n before 2.30.1 Missing OAuth Authorization Check - Severity: Medium 5.1 - Published: Jul 22, 2026 - Affected: from 2.30.0, fixed in 2.30.1; fixed in 2.29.8. - Fixed in 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-65593](https://cve.now/CVE-2026-65593): n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters - Severity: Medium 6.3 - Published: Jul 22, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.6K). ### [CVE-2026-65592](https://cve.now/CVE-2026-65592): n8n before 1.123.64 Stored DOM XSS via cachedResultUrl - Severity: High 8.4 - Published: Jul 22, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.6K). ### [CVE-2026-65591](https://cve.now/CVE-2026-65591): n8n before 1.123.64 Sanitizer Bypass Remote Code Execution - Severity: High 8.9 - Published: Jul 22, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.6K). ### [CVE-2026-65590](https://cve.now/CVE-2026-65590): n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows - Severity: Medium 5.5 - Published: Jul 22, 2026 - Affected: from 2.30.0, fixed in 2.30.1; fixed in 2.29.8. - Fixed in 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-65589](https://cve.now/CVE-2026-65589): n8n before 1.123.64 Credential Exposure via LLM Node Execution Data - Severity: Medium 5.1 - Published: Jul 22, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.6K). ### [CVE-2026-65016](https://cve.now/CVE-2026-65016): n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role - Severity: High 7.7 - Published: Jul 22, 2026 - Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8. - Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (97.6K). ### [CVE-2026-65015](https://cve.now/CVE-2026-65015): n8n before 2.30.1 Privilege Escalation via run\_node\_tool - Severity: High 7.2 - Published: Jul 22, 2026 - Affected: from 2.30.0, fixed in 2.30.1; fixed in 2.29.8. - Fixed in 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (100.7K). ### [CVE-2026-65014](https://cve.now/CVE-2026-65014): n8n before 2.28.0 Authentication Bypass via test-webhook - Severity: Medium 6.3 - Published: Jul 22, 2026 - Affected: fixed in 2.27.4. - Fixed in 2.27.4 (released Jun 24, 2026, 28 days before disclosure). - The latest release, 2.46.6, is not affected. - 58% of n8n downloads last week were affected versions (98.9K). ### [CVE-2026-59259](https://cve.now/CVE-2026-59259): n8n - Permission Bypass via Expression Parser Mismatch in External Secrets - Severity: Medium 6.0 - Published: Jul 15, 2026 - Affected: fixed in 1.123.61; from 2.28.0, fixed in 2.28.1; from 2.0.0-rc.0, fixed in 2.27.4. - Fixed in 1.123.61 (released Jun 24, 2026, 21 days before disclosure), 2.27.4 (released Jun 24, 2026, 21 days before disclosure) and 2.28.1 (released Jun 24, 2026, 21 days before disclosure). - The latest release, 2.46.6, is not affected. - 56% of n8n downloads last week were affected versions (95.7K). ### [CVE-2026-59254](https://cve.now/CVE-2026-59254): n8n - External Secrets Disclosure via Workflow Node Expressions - Severity: Medium 6.3 - Published: Jul 15, 2026 - Affected: from 2.28.0, fixed in 2.28.1; fixed in 2.27.4. - Fixed in 2.27.4 (released Jun 24, 2026, 21 days before disclosure) and 2.28.1 (released Jun 24, 2026, 21 days before disclosure). - The latest release, 2.46.6, is not affected. - 58% of n8n downloads last week were affected versions (99K). ### [CVE-2026-56353](https://cve.now/CVE-2026-56353): n8n - Authentication Bypass in Chat Trigger Node - Severity: Medium 6.3 - Published: Jul 15, 2026 - Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1. - Fixed in 1.123.22 (released Feb 25, 2026, 140 days before disclosure), 2.9.3 (released Feb 25, 2026, 140 days before disclosure) and 2.10.1 (released Feb 25, 2026, 140 days before disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (82.8K). ### [CVE-2026-56352](https://cve.now/CVE-2026-56352): n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter - Severity: Medium 5.3 - Published: Jul 15, 2026 - Affected: fixed in 2.19.3. - Fixed in 2.19.3 (released May 6, 2026, 70 days before disclosure). - The latest release, 2.46.6, is not affected. - 54% of n8n downloads last week were affected versions (92.4K). ### [CVE-2026-56349](https://cve.now/CVE-2026-56349): n8n - Guardrail Node Bypass via Crafted Input - Severity: Medium 6.3 - Published: Jul 15, 2026 - Affected: fixed in 2.10.0. - Fixed in 2.10.0 (released Feb 23, 2026, 142 days before disclosure). - The latest release, 2.46.6, is not affected. - 52% of n8n downloads last week were affected versions (88.6K). ### [CVE-2026-58661](https://cve.now/CVE-2026-58661): n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint - Severity: Medium 5.3 - Published: Jul 10, 2026 - Affected: from 2.0.0, fixed in 2.28.0; fixed in 1.123.58. - Fixed in 1.123.58 (released Jun 18, 2026, 22 days before disclosure) and 2.28.0 (released Jun 23, 2026, 17 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.3K). ### [CVE-2026-56354](https://cve.now/CVE-2026-56354): n8n - Cross-Site Scripting and Open Redirect in Form Node - Severity: Medium 5.1 - Published: Jul 10, 2026 - Affected: from 2.11.0, fixed in 2.12.0; from 2.0.0-rc.0, fixed in 2.10.4; fixed in 1.123.24. - Fixed in 1.123.24 (released Mar 11, 2026, 121 days before disclosure), 2.10.4 (released Mar 6, 2026, 126 days before disclosure) and 2.12.0 (released Mar 9, 2026, 123 days before disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (83.9K). ### [CVE-2026-59209](https://cve.now/CVE-2026-59209): n8n: Shared Credential Header Leak via HTTP Request Pagination Expression - Severity: High 7.1 - Published: Jul 9, 2026 - Affected: fixed in 1.123.61; from 2.28.0, fixed in 2.28.1; from 2.0.0-rc.0, fixed in 2.27.4. - Fixed in 1.123.61 (released Jun 24, 2026, 15 days before disclosure), 2.27.4 (released Jun 24, 2026, 15 days before disclosure) and 2.28.1 (released Jun 24, 2026, 15 days before disclosure). - The latest release, 2.46.6, is not affected. - 56% of n8n downloads last week were affected versions (95.7K). ### [CVE-2026-59206](https://cve.now/CVE-2026-59206): n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration - Severity: High 7.1 - Published: Jul 9, 2026 - Affected: fixed in 1.123.61; from 2.28.0, fixed in 2.28.1; from 2.0.0-rc.0, fixed in 2.27.4. - Fixed in 1.123.61 (released Jun 24, 2026, 15 days before disclosure), 2.27.4 (released Jun 24, 2026, 15 days before disclosure) and 2.28.1 (released Jun 24, 2026, 15 days before disclosure). - The latest release, 2.46.6, is not affected. - 56% of n8n downloads last week were affected versions (95.7K). ### [CVE-2026-59208](https://cve.now/CVE-2026-59208): n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution - Severity: High 7.6 - Published: Jul 9, 2026 - Affected: from 2.28.0, fixed in 2.28.1; fixed in 2.27.4. - Fixed in 2.27.4 (released Jun 24, 2026, 15 days before disclosure) and 2.28.1 (released Jun 24, 2026, 15 days before disclosure). - The latest release, 2.46.6, is not affected. - 58% of n8n downloads last week were affected versions (99K). ### [CVE-2026-59207](https://cve.now/CVE-2026-59207): n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector - Severity: High 7.1 - Published: Jul 9, 2026 - Affected: from 2.28.0, fixed in 2.28.1; fixed in 2.27.4. - Fixed in 2.27.4 (released Jun 24, 2026, 15 days before disclosure) and 2.28.1 (released Jun 24, 2026, 15 days before disclosure). - The latest release, 2.46.6, is not affected. - 58% of n8n downloads last week were affected versions (99K). ### [CVE-2026-59257](https://cve.now/CVE-2026-59257): n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation - Severity: Medium 5.3 - Published: Jul 8, 2026 - Affected: fixed in 1.123.61; from 2.28.0, fixed in 2.28.1; from 2.0.0-rc.0, fixed in 2.27.4. - Fixed in 1.123.61 (released Jun 24, 2026, 14 days before disclosure), 2.27.4 (released Jun 24, 2026, 14 days before disclosure) and 2.28.1 (released Jun 24, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 56% of n8n downloads last week were affected versions (95.7K). ### [CVE-2026-59253](https://cve.now/CVE-2026-59253): n8n - Improper Authorization in Workflow Assignment to Folders - Severity: Medium 5.3 - Published: Jul 8, 2026 - Affected: fixed in 2.28.0. - Fixed in 2.28.0 (released Jun 23, 2026, 15 days before disclosure). - The latest release, 2.46.6, is not affected. - 59% of n8n downloads last week were affected versions (99.8K). ### [CVE-2026-56778](https://cve.now/CVE-2026-56778): n8n - Authorization Bypass in Public API Execution Retry Endpoint - Severity: Medium 5.3 - Published: Jul 8, 2026 - Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7. - Fixed in 2.25.7 (released Jun 10, 2026, 28 days before disclosure) and 2.26.2 (released Jun 10, 2026, 28 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.9K). ### [CVE-2026-56776](https://cve.now/CVE-2026-56776): n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint - Severity: Medium 5.3 - Published: Jul 8, 2026 - Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7. - Fixed in 1.123.55 (released Jun 10, 2026, 28 days before disclosure), 2.25.7 (released Jun 10, 2026, 28 days before disclosure) and 2.26.2 (released Jun 10, 2026, 28 days before disclosure). - The latest release, 2.46.6, is not affected. - 55% of n8n downloads last week were affected versions (93.3K). ### [CVE-2026-56775](https://cve.now/CVE-2026-56775): n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints - Severity: Medium 5.3 - Published: Jul 8, 2026 - Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7. - Fixed in 1.123.55 (released Jun 10, 2026, 28 days before disclosure), 2.25.7 (released Jun 10, 2026, 28 days before disclosure) and 2.26.2 (released Jun 10, 2026, 28 days before disclosure). - The latest release, 2.46.6, is not affected. - 55% of n8n downloads last week were affected versions (93.3K). ### [CVE-2026-56360](https://cve.now/CVE-2026-56360): n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger - Severity: Medium 6.3 - Published: Jul 8, 2026 - Affected: fixed in 1.123.18; from 2.0.0, fixed in 2.6.2. - Fixed in 1.123.18 (released Jan 29, 2026, 160 days before disclosure) and 2.6.2 (released Jan 28, 2026, 161 days before disclosure). - The latest release, 2.46.6, is not affected. - 47% of n8n downloads last week were affected versions (79.8K). ### [CVE-2026-56359](https://cve.now/CVE-2026-56359): n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL - Severity: Medium 4.8 - Published: Jul 8, 2026 - Affected: from 2.7.0, fixed in 2.8.0; fixed in 2.6.4. - Fixed in 2.6.4 (released Feb 6, 2026, 152 days before disclosure) and 2.8.0 (released Feb 10, 2026, 148 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.3K). ### [CVE-2025-71380](https://cve.now/CVE-2025-71380): n8n - Arbitrary Command Execution via Execute Command Node - Severity: High 8.7 - Published: Jul 4, 2026 - Affected: through 1.114.4. - Fixed in 1.115.0 (released Oct 6, 2025, 271 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2.46.6, is not affected. - 34% of n8n downloads last week were affected versions (57.6K). ### [CVE-2026-56777](https://cve.now/CVE-2026-56777): n8n - AST Validator Bypass in Python Code Node - Severity: Medium 5.3 - Published: Jun 30, 2026 - Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7. - Fixed in 2.25.7 (released Jun 10, 2026, 20 days before disclosure) and 2.26.2 (released Jun 10, 2026, 20 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.9K). ### [CVE-2026-56356](https://cve.now/CVE-2026-56356): n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field - Severity: Medium 5.1 - Published: Jun 30, 2026 - Affected: fixed in 1.123.27; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3. - Fixed in 1.123.27 (released Mar 25, 2026, 97 days before disclosure), 2.13.3 (released Mar 25, 2026, 97 days before disclosure) and 2.14.1 (released Mar 25, 2026, 97 days before disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (84.7K). ### [CVE-2026-56350](https://cve.now/CVE-2026-56350): n8n - SSO Enforcement Bypass via API - Severity: Medium 6.0 - Published: Jun 30, 2026 - Affected: fixed in 2.8.0. - Fixed in 2.8.0 (released Feb 10, 2026, 140 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.5K). ### [CVE-2026-56358](https://cve.now/CVE-2026-56358): n8n - Stored Cross-Site Scripting in Form Trigger Node - Severity: Medium 5.1 - Published: Jun 24, 2026 - Affected: from 2.0.0-rc.0, fixed in 2.11.2; fixed in 1.123.25. - Fixed in 1.123.25 (released Mar 13, 2026, 103 days before disclosure) and 2.11.2 (released Mar 9, 2026, 107 days before disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (83.8K). ### [CVE-2026-56351](https://cve.now/CVE-2026-56351): n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes - Severity: Medium 5.3 - Published: Jun 24, 2026 - Affected: fixed in 2.4.0. - Fixed in 2.4.0 (released Jan 12, 2026, 163 days before disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (84.5K). ### [CVE-2026-44792](https://cve.now/CVE-2026-44792): n8n: Source Control Pull SQL Injection - Severity: High 8.9 - Published: Jun 23, 2026 - Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.21.1; from 2.0.0-rc.0, fixed in 2.20.7. - Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.21.1 (released May 13, 2026, 41 days before disclosure). - The latest release, 2.46.6, is not affected. - 52% of n8n downloads last week were affected versions (88.7K). ### [CVE-2026-44791](https://cve.now/CVE-2026-44791): n8n: XML Node Prototype Pollution Patch Bypass - Severity: Critical 9.4 - Published: Jun 23, 2026 - Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.22.1; from 2.0.0-rc.0, fixed in 2.20.7. - Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.22.1 (released May 21, 2026, 33 days before disclosure). - The latest release, 2.46.6, is not affected. - 53% of n8n downloads last week were affected versions (90.5K). ### [CVE-2026-44790](https://cve.now/CVE-2026-44790): n8n: Arbitrary File Read via Git Node - Severity: Critical 9.4 - Published: Jun 23, 2026 - Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.22.1; from 2.0.0-rc.0, fixed in 2.20.7. - Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.22.1 (released May 21, 2026, 33 days before disclosure). - The latest release, 2.46.6, is not affected. - 53% of n8n downloads last week were affected versions (90.5K). ### [CVE-2026-44789](https://cve.now/CVE-2026-44789): n8n: HTTP Request Node Pagination Prototype Pollution to RCE - Severity: Critical 9.4 - Published: Jun 23, 2026 - Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.22.1; from 2.0.0-rc.0, fixed in 2.20.7. - Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.22.1 (released May 21, 2026, 33 days before disclosure). - The latest release, 2.46.6, is not affected. - 53% of n8n downloads last week were affected versions (90.5K). ### [CVE-2026-45732](https://cve.now/CVE-2026-45732): n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints - Severity: High 8.3 - Published: Jun 23, 2026 - Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.21.1; from 2.0.0-rc.0, fixed in 2.20.7. - Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.21.1 (released May 13, 2026, 41 days before disclosure). - The latest release, 2.46.6, is not affected. - 52% of n8n downloads last week were affected versions (88.7K). ### [CVE-2026-49444](https://cve.now/CVE-2026-49444): n8n: Python sandbox escape - Severity: High 7.1 - Published: Jun 23, 2026 - Affected: fixed in 1.123.48; from 2.22.0, fixed in 2.22.4; from 2.0.0-rc.0, fixed in 2.21.8. - Fixed in 1.123.48 (released May 27, 2026, 27 days before disclosure), 2.21.8 (released May 27, 2026, 27 days before disclosure) and 2.22.4 (released May 27, 2026, 27 days before disclosure). - The latest release, 2.46.6, is not affected. - 54% of n8n downloads last week were affected versions (91K). ### [CVE-2026-49465](https://cve.now/CVE-2026-49465): n8n: Git Node Clone and Push Operations Bypass File Sandbox - Severity: Medium 6.0 - Published: Jun 23, 2026 - Affected: fixed in 1.123.48; from 2.22.0, fixed in 2.22.4; from 2.0.0-rc.0, fixed in 2.21.8. - Fixed in 1.123.48 (released May 27, 2026, 27 days before disclosure), 2.21.8 (released May 27, 2026, 27 days before disclosure) and 2.22.4 (released May 27, 2026, 27 days before disclosure). - The latest release, 2.46.6, is not affected. - 54% of n8n downloads last week were affected versions (91K). ### [CVE-2026-54304](https://cve.now/CVE-2026-54304): n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host - Severity: High 7.1 - Published: Jun 23, 2026 - Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.1; from 2.0.0-rc.0, fixed in 2.25.7. - Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.1 (released Jun 9, 2026, 14 days before disclosure). - The latest release, 2.46.6, is not affected. - 55% of n8n downloads last week were affected versions (93.2K). ### [CVE-2026-54307](https://cve.now/CVE-2026-54307): n8n: Credential Exfiltration via Permission Bypass - Severity: High 8.5 - Published: Jun 23, 2026 - Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7. - Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure). - The latest release, 2.46.6, is not affected. - 55% of n8n downloads last week were affected versions (93.3K). ### [CVE-2026-54302](https://cve.now/CVE-2026-54302): n8n: Stored XSS in Chat Trigger Node - Severity: High 7.0 - Published: Jun 23, 2026 - Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7. - Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure). - The latest release, 2.46.6, is not affected. - 55% of n8n downloads last week were affected versions (93.3K). ### [CVE-2026-54305](https://cve.now/CVE-2026-54305): n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints - Severity: High 8.9 - Published: Jun 23, 2026 - Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7. - Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure). - The latest release, 2.46.6, is not affected. - 55% of n8n downloads last week were affected versions (93.3K). ### [CVE-2026-54301](https://cve.now/CVE-2026-54301): n8n: Same-Origin XSS in Respond to Webhook Node - Severity: High 7.0 - Published: Jun 23, 2026 - Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7. - Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure). - The latest release, 2.46.6, is not affected. - 55% of n8n downloads last week were affected versions (93.3K). ### [CVE-2026-54306](https://cve.now/CVE-2026-54306): n8n: Prototype Pollution enables confused-deputy execution via public webhooks - Severity: Medium 6.3 - Published: Jun 23, 2026 - Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7. - Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.9K). ### [CVE-2026-54308](https://cve.now/CVE-2026-54308): n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node - Severity: Medium 6.3 - Published: Jun 23, 2026 - Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7. - Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.9K). ### [CVE-2026-54311](https://cve.now/CVE-2026-54311): n8n: Merge Node SQL Mode Prototype Pollution - Severity: Medium 6.0 - Published: Jun 23, 2026 - Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7. - Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.9K). ### [CVE-2026-54310](https://cve.now/CVE-2026-54310): n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes - Severity: Medium 6.5 - Published: Jun 23, 2026 - Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7. - Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.9K). ### [CVE-2026-54309](https://cve.now/CVE-2026-54309): n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions - Severity: High 8.8 - Published: Jun 23, 2026 - Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7. - Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.9K). ### [CVE-2026-54314](https://cve.now/CVE-2026-54314): n8n: Denial of Service via ZIP decompression in webhook workflow - Severity: Medium 6.3 - Published: Jun 23, 2026 - Affected: fixed in 2.24.0. - Fixed in 2.24.0 (released Jun 2, 2026, 21 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.4K). ### [CVE-2026-54312](https://cve.now/CVE-2026-54312): n8n: Microsoft SQL Node Prototype Pollution - Severity: High 7.2 - Published: Jun 23, 2026 - Affected: fixed in 2.24.0. - Fixed in 2.24.0 (released Jun 2, 2026, 21 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.4K). ### [CVE-2026-54303](https://cve.now/CVE-2026-54303): n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints - Severity: Medium 6.8 - Published: Jun 23, 2026 - Affected: fixed in 2.24.0. - Fixed in 2.24.0 (released Jun 2, 2026, 21 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.4K). ### [CVE-2026-54313](https://cve.now/CVE-2026-54313): n8n: NoSQL Injection in MongoDB Node Find And Replace Operation - Severity: Medium 6.5 - Published: Jun 23, 2026 - Affected: fixed in 2.24.0. - Fixed in 2.24.0 (released Jun 2, 2026, 21 days before disclosure). - The latest release, 2.46.6, is not affected. - 57% of n8n downloads last week were affected versions (96.4K). ### [CVE-2026-56357](https://cve.now/CVE-2026-56357): n8n - Webhook Forgery via Missing HMAC-SHA256 Signature Verification in GitHub Webhook Trigger - Severity: Medium 6.3 - Published: Jun 22, 2026 - Affected: fixed in 1.123.15; from 2.0.0, fixed in 2.5.0. - Fixed in 1.123.15 (released Jan 15, 2026, 158 days before disclosure) and 2.5.0 (released Jan 20, 2026, 153 days before disclosure). - The latest release, 2.46.6, is not affected. - 47% of n8n downloads last week were affected versions (79.1K). ### [CVE-2026-56348](https://cve.now/CVE-2026-56348): n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint - Severity: Medium 5.3 - Published: Jun 22, 2026 - Affected: fixed in 2.20.0. - Fixed in 2.20.0 (released May 5, 2026, 48 days before disclosure). - The latest release, 2.46.6, is not affected. - 54% of n8n downloads last week were affected versions (92.5K). ### [CVE-2026-42237](https://cve.now/CVE-2026-42237): n8n: SQL Injection in Snowflake and MySQL Nodes - Severity: Medium 5.3 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.6K). ### [CVE-2026-42236](https://cve.now/CVE-2026-42236): n8n: Unauthenticated Denial of Service via MCP Client Registration - Severity: High 8.7 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.6K). ### [CVE-2026-42235](https://cve.now/CVE-2026-42235): n8n: XSS via MCP OAuth client - Severity: High 8.8 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.17.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 45% of n8n downloads last week were affected versions (76.4K). ### [CVE-2026-42234](https://cve.now/CVE-2026-42234): n8n: Python Task Runner Sandbox Escape - Severity: High 7.1 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.17.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 45% of n8n downloads last week were affected versions (76.4K). ### [CVE-2026-42233](https://cve.now/CVE-2026-42233): n8n: SQL Injection in Oracle Database Node via Limit Field - Severity: Medium 5.3 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.6K). ### [CVE-2026-42232](https://cve.now/CVE-2026-42232): n8n: XML Node Prototype Pollution to RCE - Severity: Critical 9.4 - Published: May 4, 2026 - Affected: from 2.18.0, fixed in 2.18.1; from 2.17.0, fixed in 2.17.4; fixed in 1.123.32. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 45% of n8n downloads last week were affected versions (76.4K). ### [CVE-2026-42231](https://cve.now/CVE-2026-42231): n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE - Severity: Critical 9.4 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.17.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 45% of n8n downloads last week were affected versions (76.4K). ### [CVE-2026-42230](https://cve.now/CVE-2026-42230): n8n: Open Redirect in MCP OAuth Consent Flow - Severity: Medium 5.1 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.6K). ### [CVE-2026-42229](https://cve.now/CVE-2026-42229): n8n: SQL Injection in SeaTable Node - Severity: Medium 5.3 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.6K). ### [CVE-2026-42228](https://cve.now/CVE-2026-42228): n8n: Hijacking of Unauthenticated Chat Execution - Severity: Medium 6.3 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.6K). ### [CVE-2026-42227](https://cve.now/CVE-2026-42227): n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure - Severity: Medium 6.0 - Published: May 4, 2026 - Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4. - Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.6K). ### [CVE-2026-42226](https://cve.now/CVE-2026-42226): n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay - Severity: High 7.1 - Published: May 4, 2026 - Affected: from 2.17.0, fixed in 2.17.5; fixed in 1.123.33. - Fixed in 1.123.33 (released Apr 22, 2026, 12 days before disclosure) and 2.17.5 (released Apr 22, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 45% of n8n downloads last week were affected versions (76.4K). ### [CVE-2026-33751](https://cve.now/CVE-2026-33751): n8n Vulnerable to LDAP Filter Injection in LDAP Node - Severity: Medium 6.3 - Published: Mar 25, 2026 - Affected: fixed in 1.123.27; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3. - Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (84.7K). ### [CVE-2026-33749](https://cve.now/CVE-2026-33749): n8n Vulnerable to XSS via Binary Data Inline HTML Rendering - Severity: Medium 6.3 - Published: Mar 25, 2026 - Affected: fixed in 1.123.27; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3. - Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (84.7K). ### [CVE-2026-33724](https://cve.now/CVE-2026-33724): n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no - Severity: Medium 6.3 - Published: Mar 25, 2026 - Affected: fixed in 2.5.0. - Fixed in 2.5.0 (released Jan 20, 2026, 64 days before disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (85.3K). ### [CVE-2026-33722](https://cve.now/CVE-2026-33722): n8n Has External Secrets Authorization Bypass in Credential Saving - Severity: High 7.3 - Published: Mar 25, 2026 - Affected: fixed in 1.123.23; from 2.0.0-rc.0, fixed in 2.6.4. - Fixed in 1.123.23 (released Feb 26, 2026, 27 days before disclosure) and 2.6.4 (released Feb 6, 2026, 47 days before disclosure). - The latest release, 2.46.6, is not affected. - 47% of n8n downloads last week were affected versions (80.3K). ### [CVE-2026-33720](https://cve.now/CVE-2026-33720): n8n Has Authorization Bypass in OAuth Callback via N8N\_SKIP\_AUTH\_ON\_OAUTH\_CALLBACK - Severity: Medium 6.3 - Published: Mar 25, 2026 - Affected: fixed in 2.8.0. - Fixed in 2.8.0 (released Feb 10, 2026, 43 days before disclosure). - The latest release, 2.46.6, is not affected. - 51% of n8n downloads last week were affected versions (86.5K). ### [CVE-2026-33713](https://cve.now/CVE-2026-33713): n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression - Severity: High 8.7 - Published: Mar 25, 2026 - Affected: fixed in 1.123.26; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3. - Fixed in 1.123.26 (released Mar 19, 2026, 6 days before disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (84.7K). ### [CVE-2026-33696](https://cve.now/CVE-2026-33696): n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE - Severity: Critical 9.4 - Published: Mar 25, 2026 - Affected: from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3; fixed in 1.123.27. - Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (84.7K). ### [CVE-2026-33665](https://cve.now/CVE-2026-33665): n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover - Severity: High 8.8 - Published: Mar 25, 2026 - Affected: from 2.0.0-rc.0, fixed in 2.4.0; fixed in 1.121.0. - Fixed in 1.121.0 (released Nov 18, 2025, 127 days before disclosure) and 2.4.0 (released Jan 12, 2026, 72 days before disclosure). - The latest release, 2.46.6, is not affected. - 45% of n8n downloads last week were affected versions (75.7K). ### [CVE-2026-33663](https://cve.now/CVE-2026-33663): n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition - Severity: High 8.5 - Published: Mar 25, 2026 - Affected: fixed in 1.123.27; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3. - Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (84.7K). ### [CVE-2026-33660](https://cve.now/CVE-2026-33660): n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode - Severity: Critical 9.4 - Published: Mar 25, 2026 - Affected: from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3; fixed in 1.123.27. - Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (84.7K). ### [CVE-2026-27496](https://cve.now/CVE-2026-27496): n8n has In-Process Memory Disclosure in its Task Runner - Severity: High 7.1 - Published: Mar 25, 2026 - Affected: fixed in 1.123.22; from 2.10.0, fixed in 2.10.1; from 2.0.0-rc.0, fixed in 2.9.3. - Fixed in 1.123.22 (released Feb 25, 2026, 28 days before disclosure), 2.9.3 (released Feb 25, 2026, 28 days before disclosure) and 2.10.1 (released Feb 25, 2026, 28 days before disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (82.9K). ### [CVE-2026-27498](https://cve.now/CVE-2026-27498): n8n has Arbitrary Command Execution via File Write and Git Operations - Severity: Critical 9.0 - Published: Feb 25, 2026 - Affected: fixed in 1.123.8; from 2.0.0, fixed in 2.2.0. - Fixed in 1.123.8 (released Dec 22, 2025, 65 days before disclosure) and 2.2.0 (released Dec 22, 2025, 65 days before disclosure). - The latest release, 2.46.6, is not affected. - 44% of n8n downloads last week were affected versions (75K). ### [CVE-2026-27578](https://cve.now/CVE-2026-27578): n8n Vulnerable to Stored XSS via Various Nodes - Severity: High 8.5 - Published: Feb 25, 2026 - Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1. - Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (82.8K). ### [CVE-2026-27577](https://cve.now/CVE-2026-27577): n8n: Expression Sandbox Escape Leads to RCE - Severity: Critical 9.4 - Published: Feb 25, 2026 - Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1. - Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (82.8K). ### [CVE-2026-27497](https://cve.now/CVE-2026-27497): n8n has Potential Remote Code Execution via Merge Node - Severity: Critical 9.4 - Published: Feb 25, 2026 - Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1. - Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (82.8K). ### [CVE-2026-27495](https://cve.now/CVE-2026-27495): n8n has a Sandbox Escape in its JavaScript Task Runner - Severity: Critical 9.4 - Published: Feb 25, 2026 - Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1. - Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (82.8K). ### [CVE-2026-27494](https://cve.now/CVE-2026-27494): n8n has Arbitrary File Read via Python Code Node Sandbox Escape - Severity: High 7.1 - Published: Feb 25, 2026 - Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1. - Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (82.8K). ### [CVE-2026-27493](https://cve.now/CVE-2026-27493): n8n has Unauthenticated Expression Evaluation via Form Node - Severity: Critical 9.5 - Published: Feb 25, 2026 - Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1. - Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure). - The latest release, 2.46.6, is not affected. - 49% of n8n downloads last week were affected versions (82.8K). ### [CVE-2026-25631](https://cve.now/CVE-2026-25631): Domain allowlist bypass enables credential exfiltration - Severity: Medium 5.3 - Published: Feb 6, 2026 - Affected: fixed in 1.121.0. - Fixed in 1.121.0 (released Nov 18, 2025, 80 days before disclosure). - The latest release, 2.46.6, is not affected. - 42% of n8n downloads last week were affected versions (72.1K). ### [CVE-2026-21893](https://cve.now/CVE-2026-21893): n8n Vulnerable to Command Injection in Community Package Installation - Severity: Critical 9.4 - Published: Feb 4, 2026 - Affected: from 0.187.0, fixed in 1.120.3. - Fixed in 1.120.3 (released Nov 14, 2025, 82 days before disclosure). - The latest release, 2.46.6, is not affected. - 32% of n8n downloads last week were affected versions (54.2K). ### [CVE-2026-25115](https://cve.now/CVE-2026-25115): n8n is vulnerable to Python sandbox escape - Severity: Critical 9.4 - Published: Feb 4, 2026 - Affected: fixed in 2.4.8. - Fixed in 2.4.8 (released Jan 29, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 50% of n8n downloads last week were affected versions (85.2K). ### [CVE-2026-25056](https://cve.now/CVE-2026-25056): n8n Arbitrary File Write leading to RCE in n8n Merge Node - Severity: Critical 9.4 - Published: Feb 4, 2026 - Affected: fixed in 1.118.0; from 2.0.0, fixed in 2.4.0. - Fixed in 1.118.0 (released Oct 27, 2025, 100 days before disclosure) and 2.4.0 (released Jan 12, 2026, 23 days before disclosure). - The latest release, 2.46.6, is not affected. - 44% of n8n downloads last week were affected versions (74.1K). ### [CVE-2026-25055](https://cve.now/CVE-2026-25055): n8n Arbitrary File Write on Remote Systems via SSH Node - Severity: High 7.1 - Published: Feb 4, 2026 - Affected: from 2.0.0, fixed in 2.4.0; fixed in 1.123.12. - Fixed in 1.123.12 (released Jan 13, 2026, 22 days before disclosure) and 2.4.0 (released Jan 12, 2026, 23 days before disclosure). - The latest release, 2.46.6, is not affected. - 46% of n8n downloads last week were affected versions (78.1K). ### [CVE-2026-25054](https://cve.now/CVE-2026-25054): n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI - Severity: High 8.5 - Published: Feb 4, 2026 - Affected: from 2.0.0, fixed in 2.2.1; fixed in 1.123.9. - Fixed in 1.123.9 (released Dec 23, 2025, 43 days before disclosure) and 2.2.1 (released Dec 23, 2025, 43 days before disclosure). - The latest release, 2.46.6, is not affected. - 44% of n8n downloads last week were affected versions (75.2K). ### [CVE-2026-25053](https://cve.now/CVE-2026-25053): n8n is Vulnerable to OS Command Injection in Git Node - Severity: Critical 9.4 - Published: Feb 4, 2026 - Affected: from 2.0.0, fixed in 2.5.0; fixed in 1.123.10. - Fixed in 1.123.10 (released Jan 2, 2026, 33 days before disclosure) and 2.5.0 (released Jan 20, 2026, 15 days before disclosure). - The latest release, 2.46.6, is not affected. - 46% of n8n downloads last week were affected versions (78.8K). ### [CVE-2026-25052](https://cve.now/CVE-2026-25052): n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users - Severity: Critical 9.4 - Published: Feb 4, 2026 - Affected: from 2.0.0, fixed in 2.5.0; fixed in 1.123.18. - Fixed in 1.123.18 (released Jan 29, 2026, 6 days before disclosure) and 2.5.0 (released Jan 20, 2026, 15 days before disclosure). - The latest release, 2.46.6, is not affected. - 47% of n8n downloads last week were affected versions (79.4K). ### [CVE-2026-25051](https://cve.now/CVE-2026-25051): n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS - Severity: High 8.5 - Published: Feb 4, 2026 - Affected: from 1.123.0, fixed in 1.123.2; fixed in 1.122.5. - Fixed in 1.122.5 (released Dec 4, 2025, 62 days before disclosure) and 1.123.2 (released Dec 4, 2025, 62 days before disclosure). - The latest release, 2.46.6, is not affected. - 43% of n8n downloads last week were affected versions (73.4K). ### [CVE-2025-61917](https://cve.now/CVE-2025-61917): n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner - Severity: High 7.7 - Published: Feb 4, 2026 - Affected: from 1.65.0, fixed in 1.114.3. - Fixed in 1.114.3 (released Oct 6, 2025, 121 days before disclosure). - The latest release, 2.46.6, is not affected. - 13% of n8n downloads last week were affected versions (21.5K). ### [CVE-2026-25049](https://cve.now/CVE-2026-25049): n8n Has an Expression Escape Vulnerability Leading to RCE - Severity: Critical 9.4 - Published: Feb 4, 2026 - Affected: fixed in 1.123.17; from 2.0.0, fixed in 2.5.2. - Fixed in 1.123.17 (released Jan 23, 2026, 12 days before disclosure) and 2.5.2 (released Jan 23, 2026, 12 days before disclosure). - The latest release, 2.46.6, is not affected. - 47% of n8n downloads last week were affected versions (79.5K). ### [CVE-2026-1470](https://cve.now/CVE-2026-1470): Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node. - Severity: Critical 9.9 - Published: Jan 27, 2026 - Affected: fixed in 1.123.17; from 2.0.0, fixed in 2.4.5; from 2.5.0, fixed in 2.5.1; fixed in 1.123.17; from 2.0.0, fixed in 2.4.5; from 2.5.0, fixed in 2.5.1. - Fixed in 1.123.17 (released Jan 23, 2026, 4 days before disclosure), 2.4.5 (released Jan 22, 2026, 5 days before disclosure) and 2.5.1 (released Jan 22, 2026, 5 days before disclosure). - The latest release, 2.46.6, is not affected. - 46% of n8n downloads last week were affected versions (79K). ### [CVE-2026-0863](https://cve.now/CVE-2026-0863): Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host. - Severity: High 8.5 - Published: Jan 18, 2026 - Affected: from 2.4.0, fixed in 2.4.2; fixed in 1.123.14; from 2.0.0, fixed in 2.3.5. - Fixed in 1.123.14 (released Jan 14, 2026, 4 days before disclosure), 2.3.5 (released Jan 14, 2026, 4 days before disclosure) and 2.4.2 (released Jan 14, 2026, 4 days before disclosure). - The latest release, 2.46.6, is not affected. - 46% of n8n downloads last week were affected versions (78.2K). ### [CVE-2025-68949](https://cve.now/CVE-2025-68949): n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching - Severity: Medium 5.3 - Published: Jan 13, 2026 - Affected: from 1.36.0, fixed in 2.2.0. - Fixed in 2.2.0 (released Dec 22, 2025, 22 days before disclosure). - The latest release, 2.46.6, is not affected. - 31% of n8n downloads last week were affected versions (52.8K). ### [CVE-2026-21894](https://cve.now/CVE-2026-21894): n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks - Severity: Medium 6.5 - Published: Jan 8, 2026 - Affected: from 0.150.0, fixed in 2.2.2. - Fixed in 2.2.2 (released Jan 2, 2026, 6 days before disclosure). - The latest release, 2.46.6, is not affected. - 40% of n8n downloads last week were affected versions (67.8K). ### [CVE-2026-21877](https://cve.now/CVE-2026-21877): n8n is vulnerable to Remote Code Execution via Arbitrary File Write - Severity: Critical 10.0 - Published: Jan 8, 2026 - Affected: from 0.123.0, fixed in 1.121.3. - Fixed in 1.121.3 (released Nov 26, 2025, 43 days before disclosure). - The latest release, 2.46.6, is not affected. - 36% of n8n downloads last week were affected versions (61.7K). ### [CVE-2026-21858](https://cve.now/CVE-2026-21858): n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling - Severity: Critical 10.0 - Published: Jan 7, 2026 - Affected: from 1.65.0, fixed in 1.121.0. - Fixed in 1.121.0 (released Nov 18, 2025, 50 days before disclosure). - The latest release, 2.46.6, is not affected. - 21% of n8n downloads last week were affected versions (36.3K). ### [CVE-2025-68697](https://cve.now/CVE-2025-68697): Self-hosted n8n has Legacy Code node that enables arbitrary file read/write - Severity: High 7.1 - Published: Dec 26, 2025 - Affected: from 1.2.1, fixed in 2.0.0. - Fixed in 2.0.0 (released Dec 8, 2025, 18 days before disclosure). - The latest release, 2.46.6, is not affected. - 33% of n8n downloads last week were affected versions (56.9K). ### [CVE-2025-68668](https://cve.now/CVE-2025-68668): n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node - Severity: Critical 9.9 - Published: Dec 26, 2025 - Affected: from 1.0.0, fixed in 2.0.0. - Fixed in 2.0.0 (released Dec 8, 2025, 18 days before disclosure). - The latest release, 2.46.6, is not affected. - 34% of n8n downloads last week were affected versions (57.7K). ### [CVE-2025-61914](https://cve.now/CVE-2025-61914): n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox - Severity: High 7.3 - Published: Dec 26, 2025 - Affected: fixed in 1.114.0. - Fixed in 1.114.0 (released Sep 29, 2025, 88 days before disclosure). - The latest release, 2.46.6, is not affected. - 34% of n8n downloads last week were affected versions (57.1K). ### [CVE-2025-68613](https://cve.now/CVE-2025-68613): n8n Vulnerable to Remote Code Execution via Expression Injection - Severity: Critical 10.0 · KEV - Published: Dec 19, 2025 - Affected: from 0.211.0, fixed in 1.120.4; from 1.121.0, fixed in 1.121.1. - Fixed in 1.120.4 (released Nov 19, 2025, 30 days before disclosure) and 1.121.1 (released Nov 19, 2025, 30 days before disclosure). - The latest release, 2.46.6, is not affected. - 31% of n8n downloads last week were affected versions (52.1K). ### [CVE-2025-65964](https://cve.now/CVE-2025-65964): n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook - Severity: Critical 9.4 - Published: Dec 8, 2025 - Affected: from 0.123.1, fixed in 1.119.2. - Fixed in 1.119.2 (released Nov 14, 2025, 24 days before disclosure). - The latest release, 2.46.6, is not affected. - 36% of n8n downloads last week were affected versions (60.5K). ### [CVE-2025-62726](https://cve.now/CVE-2025-62726): n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook - Severity: High 8.8 - Published: Oct 30, 2025 - Affected: fixed in 1.113.0. - Fixed in 1.113.0 (released Sep 22, 2025, 38 days before disclosure). - The latest release, 2.46.6, is not affected. - 33% of n8n downloads last week were affected versions (56.5K). ### [CVE-2025-58177](https://cve.now/CVE-2025-58177): n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameter - Severity: Medium 5.4 - Published: Sep 15, 2025 - Affected: from 1.24.0, fixed in 1.107.0. - Fixed in 1.107.0. - The latest release, 2.46.6, is not affected. - 15% of n8n downloads last week were affected versions (26K). ### [CVE-2025-57749](https://cve.now/CVE-2025-57749): n8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted files - Severity: Medium 6.5 - Published: Aug 20, 2025 - Affected: fixed in 1.106.0. - Fixed in 1.106.0. - The latest release, 2.46.6, is not affected. - 31% of n8n downloads last week were affected versions (53K). ### [CVE-2025-52478](https://cve.now/CVE-2025-52478): Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source - Severity: High 8.7 - Published: Aug 19, 2025 - Affected: from 1.77.0, fixed in 1.98.2. - Fixed in 1.98.2. - The latest release, 2.46.6, is not affected. - 5.8% of n8n downloads last week were affected versions (9.9K). ### [CVE-2025-52554](https://cve.now/CVE-2025-52554): n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflows - Severity: Medium 4.9 - Published: Jul 3, 2025 - Affected: fixed in 1.99.1. - Fixed in 1.99.1. - The latest release, 2.46.6, is not affected. - 30% of n8n downloads last week were affected versions (50.2K). ### [CVE-2025-49595](https://cve.now/CVE-2025-49595): n8n Vulnerable to Denial of Service via Malformed Binary Data Requests - Severity: Medium 4.9 - Published: Jul 3, 2025 - Affected: fixed in 1.99.0. - Fixed in 1.99.0. - The latest release, 2.46.6, is not affected. - 30% of n8n downloads last week were affected versions (50.1K). ### [CVE-2025-49592](https://cve.now/CVE-2025-49592): n8n Login Flow has Open Redirect Vulnerability - Severity: Medium 4.6 - Published: Jun 26, 2025 - Affected: fixed in 1.98.0. - Fixed in 1.98.0. - The latest release, 2.46.6, is not affected. - 29% of n8n downloads last week were affected versions (49.5K). ### [CVE-2025-46343](https://cve.now/CVE-2025-46343): n8n Vulnerable to Stored XSS through Attachments View Endpoint - Severity: Medium 5.0 - Published: Apr 29, 2025 - Affected: fixed in 1.90.0. - Fixed in 1.90.0. - The latest release, 2.46.6, is not affected. - 26% of n8n downloads last week were affected versions (44K). ### [CVE-2023-27564](https://cve.now/CVE-2023-27564): The n8n package 0.218.0 for Node.js allows Information Disclosure. - Severity: High 7.5 - Published: May 10, 2023 - Affected: fixed in 0.216.1. - Fixed in 0.216.1. - The latest release, 2.46.6, is not affected. - 12% of n8n downloads last week were affected versions (20.9K). ### [CVE-2023-27563](https://cve.now/CVE-2023-27563): The n8n package 0.218.0 for Node.js allows Escalation of Privileges. - Severity: High 8.8 - Published: May 10, 2023 - Affected: fixed in 0.216.1. - Fixed in 0.216.1. - The latest release, 2.46.6, is not affected. - 12% of n8n downloads last week were affected versions (20.9K). ### [CVE-2023-27562](https://cve.now/CVE-2023-27562): The n8n package 0.218.0 for Node.js allows Directory Traversal. - Severity: Medium 6.5 - Published: May 10, 2023 - Affected: fixed in 0.216.1. - Fixed in 0.216.1. - The latest release, 2.46.6, is not affected. - 12% of n8n downloads last week were affected versions (20.9K). --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/npm/n8n Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.