Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 246

Export CSV
CVE-2026-126381

n8n before 2.44.1 SQL Injection via Vector Store (OracleDB) Metadata Filter Key

n8n before 2.43.5, 2.44.x before 2.44.1, and 3.x before 3.0.1 contains an SQL injection vulnerability in the Vector Store (OracleDB) node, which does not validate Metadata Filter keys used in vector search queries. Attackers can supply crafted filter keys through untrusted workflow input such as webhooks to read data accessible to the configured Oracle credential.

CVSS 4.0 · 4.9 Medium EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126382

n8n before 2.38.0 Authentication Bypass via Asana Trigger Webhook Secret Reset

n8n before 2.38.0 and 3.x before 3.0.1 contains a missing authentication vulnerability in the Asana Trigger that accepts a new webhook verification secret from any request carrying an X-Hook-Secret header. Unauthenticated attackers who know the webhook URL can replace the secret, send forged Asana events that pass signature verification, and trigger workflows with attacker-controlled data while genuine deliveries are rejected.

CVSS 4.0 · 6.3 Medium EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126383

n8n before 1.123.89 NoSQL Injection via MongoDB Node Update Key

n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 contains a NoSQL injection vulnerability in the MongoDB node's Update and Find And Replace operations due to insufficient validation of the update key value taken from incoming items. Attackers who can supply untrusted input, such as a webhook body, to a workflow using these operations can make the node match and overwrite unintended documents or insert new documents in the MongoDB database.

CVSS 4.0 · 5.3 Medium EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126384

n8n before 1.123.89 RCE via Bundled GraphicsMagick in Edit Image Node

n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 bundles a GraphicsMagick version with known vulnerabilities in its official Docker image, which the Edit Image node uses to process images. Attackers who can supply crafted untrusted images to an Edit Image workflow, such as one fed by a Webhook node, can execute code on the n8n instance.

CVSS 4.0 · 7.7 High EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126385

n8n before 2.46.1 OAuth Account Hijack via Unauthenticated Credential Callback

n8n before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 contains a flaw in the OAuth2 credential callback of the dynamic-credential connect flow, which does not verify that the completing browser belongs to the user who started the flow. Members with access to a resolvable OAuth2 credential can send the provider authorization URL to a victim; if the victim consents without an active n8n session, the victim's tokens are stored under the member's identity, letting the member's workflows act as the victim.

CVSS 4.0 · 4.8 Medium EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126386

n8n before 1.123.89 Open Redirect via MCP OAuth Dynamic Client Registration

n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 contains an open redirect vulnerability in the unauthenticated MCP OAuth dynamic client registration flow, which accepts arbitrary redirect_uri values via the /mcp-oauth/register endpoint. Attackers can send victims crafted /mcp-oauth/authorize URLs that redirect them to attacker-controlled sites before instance checks run, enabling phishing.

CVSS 4.0 · 5.1 Medium EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126387

n8n before 2.46.1 Arbitrary File Read via Browser Use browser_upload Tool

n8n before 2.46.1 contains an arbitrary file read vulnerability that allows authenticated members to read server files by supplying absolute paths to the Browser Use browser_upload tool. Attackers with a connected remote browser session can have Playwright read files such as instance configuration from the n8n server and retrieve their contents from the page.

CVSS 4.0 · 6 Medium EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126388

n8n before 2.46.1 Credential Leak via Cross-Origin Redirects in Nodes

n8n before 2.46.1 contains a credential exposure vulnerability that forwards Authorization headers and basic auth credentials on cross-origin redirects because sendCredentialsOnCrossOriginRedirect defaults to true. Attackers controlling a redirect target or an expression-fed URL in credential-using nodes can capture stored workflow credentials sent to their endpoint.

CVSS 4.0 · 6.3 Medium EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126389

n8n before 1.123.89 Authentication Bypass via Chat Trigger Embedded Chat

n8n before 1.123.89 contains an authentication bypass vulnerability in the Chat Trigger that allows unauthenticated attackers to skip n8n User Auth through the setup GET webhook route in embedded chat mode. Attackers can send unauthenticated GET requests to the chat webhook URL to read named session conversation history or trigger workflows with attacker-supplied input.

CVSS 4.0 · 6.3 Medium EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126390

n8n before 1.123.89 NocoDB Node API Token Leak via Attachment Download

n8n before 1.123.89 contains a credential leakage vulnerability in the NocoDB node that sends the configured NocoDB API token to attacker-chosen hosts when downloading attachments. Attackers with write access to a NocoDB attachment cell can insert a URL to their host, capturing the API token when the workflow executes with Download Attachments enabled.

CVSS 4.0 · 6.3 Medium EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-126391

n8n before 1.123.89 RCE via Workflow Expression Evaluation Sandbox Escape

n8n before 1.123.89 contains an insufficient isolation vulnerability in workflow expression evaluation that allows authenticated users to escape the sandbox. Attackers with permission to create or modify workflows can craft expressions referencing unexpected JavaScript properties to execute arbitrary code on the n8n host.

CVSS 4.0 · 7.7 High EPSS n/a KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-119408

n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden node types can execute JavaScript in the n8n main process.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-118679

n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger

n8n before 1.123.83, 2.41.4, and 2.42.1 contains a server-side request forgery vulnerability in the Slack Trigger webhook that allows unauthenticated attackers to exfiltrate Slack tokens by bypassing signature verification when no signing secret is set. Attackers who know the webhook URL can name a file to download, causing the node to send the workspace access token to an attacker host and return the response.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-118675

n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow

n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared workflows to use restricted credentials by loading sub-workflows from URLs or local files. Attackers can configure the Execute Sub-workflow node with source url or localFile to serve content that resolves project credentials and returns their decrypted values.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-118646

n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node

n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenticated members to block the event loop via crafted glob patterns. Attackers who can create and run workflows can submit a wildcard-heavy File(s) Selector pattern causing exponential backtracking, making the UI, API, webhooks, and health checks unresponsive until restart.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-118642

n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows

n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated members to use inaccessible credentials through inline sub-workflow nodes with non-boolean disabled values. Attackers knowing a credential id can run Execute Workflow nodes in inline JSON mode that skip the permission check and send decrypted credentials to attacker-controlled servers.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-118677

n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted n8n-computer-use:// link to connect their computer to an attacker-controlled instance, inheriting previously granted permissions and acting on the computer through the gateway.

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-118648

n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability because some webhook response paths, such as error responses and responses without headers, omit the sandbox Content-Security-Policy. Authenticated members who can create and activate workflows can serve HTML that runs on the n8n origin, letting scripts act with the session of users who open the webhook URL.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-118644

n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance

n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of the user who started the run, to the configured error workflow. A project editor can set a colleague's workflow settings.errorWorkflow to an error workflow they own, inherit the colleague's identity when that workflow fails, and resolve the colleague's per-user dynamic credential secrets.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
N8n
Products
N8n
CVE-2026-118640

n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass

n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only users to register restricted tool types. Users with the global:chatUser role can add and run tools through chat to execute sandboxed code, access permitted files, and use instance workflows, Data Tables, and agents.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
N8n
Products
N8n