N8n-io vulnerabilities
206 CVEs and advisories name N8n-io as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-42235n8n: XSS via MCP OAuth client
- CVE-2026-42234n8n: Python Task Runner Sandbox Escape
- CVE-2026-42233n8n: SQL Injection in Oracle Database Node via Limit Field
- CVE-2026-42232n8n: XML Node Prototype Pollution to RCE
- CVE-2026-42231n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE
- CVE-2026-42230n8n: Open Redirect in MCP OAuth Consent Flow
- CVE-2026-42229n8n: SQL Injection in SeaTable Node
- CVE-2026-42228n8n: Hijacking of Unauthenticated Chat Execution
- CVE-2026-42227n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure
- CVE-2026-42226n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay
- CVE-2026-33751n8n Vulnerable to LDAP Filter Injection in LDAP Node
- CVE-2026-33749n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
- CVE-2026-33724n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no
- CVE-2026-33722n8n Has External Secrets Authorization Bypass in Credential Saving
- CVE-2026-33720n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK
- CVE-2026-33713n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression
- CVE-2026-33696n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE
- CVE-2026-33665n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover
- CVE-2026-33663n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
- CVE-2026-33660n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
- CVE-2026-27496n8n has In-Process Memory Disclosure in its Task Runner
- CVE-2026-27498n8n has Arbitrary Command Execution via File Write and Git Operations
- CVE-2026-27578n8n Vulnerable to Stored XSS via Various Nodes
- CVE-2026-27577n8n: Expression Sandbox Escape Leads to RCE
- CVE-2026-27497n8n has Potential Remote Code Execution via Merge Node
- CVE-2026-27495n8n has a Sandbox Escape in its JavaScript Task Runner
- CVE-2026-27494n8n has Arbitrary File Read via Python Code Node Sandbox Escape
- CVE-2026-27493n8n has Unauthenticated Expression Evaluation via Form Node
- CVE-2026-25631Domain allowlist bypass enables credential exfiltration
- CVE-2026-21893n8n Vulnerable to Command Injection in Community Package Installation