N8n-io vulnerabilities
206 CVEs and advisories name N8n-io as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-119557n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node
- CVE-2026-119408n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes
- CVE-2026-118679n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger
- CVE-2026-118678n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction
- CVE-2026-118677n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
- CVE-2026-118676n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass
- CVE-2026-118675n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow
- CVE-2026-118649n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables
- CVE-2026-118648n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy
- CVE-2026-118647n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data
- CVE-2026-118646n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node
- CVE-2026-118645n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter
- CVE-2026-118644n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance
- CVE-2026-118643n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data
- CVE-2026-118642n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows
- CVE-2026-118641n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes
- CVE-2026-118640n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass
- CVE-2026-110853n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON
- CVE-2026-110852n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution
- CVE-2026-110851n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint
- CVE-2026-110850n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters
- CVE-2026-110849n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview
- CVE-2026-110848n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge
- CVE-2026-110847n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter
- CVE-2026-110846n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook
- CVE-2026-110845n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation
- CVE-2026-110844n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows
- CVE-2026-110843n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint
- CVE-2026-110842n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter
- CVE-2026-110841n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval