n8n-io n8n

• CVE-2026-86075 High 8.7 n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint 0.6%
• CVE-2026-86076 High 8.7 n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution 0.8%
• CVE-2026-86077 Medium 6.3 n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket 0.4%
• CVE-2026-86078 Medium 6.0 n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service 0.6%
• CVE-2026-86079 Medium 6.3 n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers 0.5%
• CVE-2026-86080 Medium 6.3 n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open 0.3%
• CVE-2026-86081 High 7.1 n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path 0.6%
• CVE-2026-86082 High 7.1 n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node 0.4%
• CVE-2026-86083 High 7.7 n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution 0.7%
• CVE-2026-86084 Medium 6.0 n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions 0.5%
• CVE-2026-86085 Medium 5.1 n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints 0.4%
• CVE-2026-86993 Medium 5.9 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check 0.5%
• CVE-2026-86994 Medium 5.3 n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter 0.3%
• CVE-2026-86995 Medium 5.3 n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read 0.4%
• CVE-2026-86996 Medium 5.3 n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy 0.3%
• CVE-2026-86074 Medium 5.9 n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content 0.4%
• CVE-2026-86073 Medium 5.9 n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution 0.4%
• CVE-2026-85173 Medium 5.3 n8n before 2.36.2 Missing Authorization via Insights API 0.3%
• CVE-2026-85172 Medium 5.3 n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass 0.3%
• CVE-2026-85171 High 7.1 n8n before 1.123.73 Credential Exposure via Error Logging 0.6%
• CVE-2026-85170 High 7.1 n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes 0.4%
• CVE-2026-85169 High 8.7 n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak 0.9%
• CVE-2026-85168 High 7.7 n8n before 1.123.73 Remote Code Execution via Git Node 0.8%
• CVE-2026-85167 Medium 6.3 n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes 0.4%
• CVE-2026-85166 High 7.2 n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node 0.4%
• CVE-2026-85165 High 7.2 n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement 0.6%
• CVE-2026-77085 Medium 6.3 n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool 0.4%
• CVE-2026-77084 High 7.7 n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values 0.7%
• CVE-2026-77083 Medium 6.0 n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution 0.4%
• CVE-2026-77082 Medium 5.3 n8n before 1.123.69 ReDoS via Filter and Switch Node 0.5%
• CVE-2026-77081 Medium 5.1 n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node 0.4%
• CVE-2026-77080 High 8.7 n8n before 1.123.69 Arbitrary File Read and Write via Snowflake 0.6%
• CVE-2026-77079 High 7.4 n8n before 2.34.1 Authorization Bypass via Custom Role Deletion 0.5%
• CVE-2026-77077 High 7.2 n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution 0.6%
• CVE-2026-77076 High 7.1 n8n before 1.123.69 Credential Leak via GraphQL Node Error 0.5%
• CVE-2026-77075 High 8.4 n8n before 1.123.69 Expression Injection via Resource Locator 0.5%
• CVE-2026-77074 Medium 6.0 n8n before 1.123.69 SSRF via Edit Image Node 0.4%
• CVE-2026-77073 Medium 5.3 n8n before 2.34.1 Cross-Project Credential Access via MCP 0.3%
• CVE-2026-77072 High 8.4 n8n before 1.123.69 Stored XSS via Form Completion Page 0.3%
• CVE-2026-77071 High 7.1 n8n before 1.123.69 PostgREST Filter Injection via Supabase 0.6%
• CVE-2026-77070 High 7.1 n8n before 1.123.69 NoSQL Injection via MongoDB Node 0.5%
• CVE-2026-77069 Low 2.3 n8n before 1.123.69 SSRF Protection Bypass via OAuth2 0.3%
• CVE-2026-77068 High 8.7 n8n before 2.34.1 Remote Code Execution via Path Traversal 0.9%
• CVE-2026-71539 High 8.9 n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution 0.3%
• CVE-2026-72775 Medium 5.8 n8n before 1.123.67 SQL Injection via PostgresTrigger Node 0.5%
• CVE-2026-72774 High 7.1 n8n before 1.123.67 Authentication Bypass via HTTP Request Node 0.4%
• CVE-2026-72773 Medium 4.9 n8n before 2.32.1 Path Traversal via computer-use search_files 0.6%
• CVE-2026-72772 High 8.9 n8n before 2.32.1 Authentication Bypass via Token Exchange 0.4%
• CVE-2026-72771 High 7.1 n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes 0.4%
• CVE-2026-72770 High 7.1 n8n before 1.123.67 Path Traversal via Git Node Operations 0.7%