N8n-io vulnerabilities
206 CVEs and advisories name N8n-io as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-86993n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
- CVE-2026-86994n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
- CVE-2026-86995n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
- CVE-2026-86996n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
- CVE-2026-86074n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
- CVE-2026-86073n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
- CVE-2026-85173n8n before 2.36.2 Missing Authorization via Insights API
- CVE-2026-85172n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass
- CVE-2026-85171n8n before 1.123.73 Credential Exposure via Error Logging
- CVE-2026-85170n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes
- CVE-2026-85169n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak
- CVE-2026-85168n8n before 1.123.73 Remote Code Execution via Git Node
- CVE-2026-85167n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
- CVE-2026-85166n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node
- CVE-2026-85165n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement
- CVE-2026-77085n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool
- CVE-2026-77084n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values
- CVE-2026-77083n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution
- CVE-2026-77082n8n before 1.123.69 ReDoS via Filter and Switch Node
- CVE-2026-77081n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node
- CVE-2026-77080n8n before 1.123.69 Arbitrary File Read and Write via Snowflake
- CVE-2026-77079n8n before 2.34.1 Authorization Bypass via Custom Role Deletion
- CVE-2026-77077n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution
- CVE-2026-77076n8n before 1.123.69 Credential Leak via GraphQL Node Error
- CVE-2026-77075n8n before 1.123.69 Expression Injection via Resource Locator
- CVE-2026-77074n8n before 1.123.69 SSRF via Edit Image Node
- CVE-2026-77073n8n before 2.34.1 Cross-Project Credential Access via MCP
- CVE-2026-77072n8n before 1.123.69 Stored XSS via Form Completion Page
- CVE-2026-77071n8n before 1.123.69 PostgREST Filter Injection via Supabase
- CVE-2026-77070n8n before 1.123.69 NoSQL Injection via MongoDB Node