n8n-io n8n

• CVE-2026-42236 High 8.7 n8n: Unauthenticated Denial of Service via MCP Client Registration 0.5%
• CVE-2026-42235 High 8.8 n8n: XSS via MCP OAuth client 0.3%
• CVE-2026-42234 High 7.1 n8n: Python Task Runner Sandbox Escape 0.4%
• CVE-2026-42233 Medium 5.3 n8n: SQL Injection in Oracle Database Node via Limit Field 0.3%
• CVE-2026-42232 Critical 9.4 n8n: XML Node Prototype Pollution to RCE 0.5%
• CVE-2026-42231 Critical 9.4 n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE 0.9%
• CVE-2026-42230 Medium 5.1 n8n: Open Redirect in MCP OAuth Consent Flow 0.2%
• CVE-2026-42229 Medium 5.3 n8n: SQL Injection in SeaTable Node 0.3%
• CVE-2026-42228 Medium 6.3 n8n: Hijacking of Unauthenticated Chat Execution 0.4%
• CVE-2026-42227 Medium 6.0 n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure 0.2%
• CVE-2026-42226 High 7.1 n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay 0.3%
• CVE-2026-33751 Medium 6.3 n8n Vulnerable to LDAP Filter Injection in LDAP Node 0.2%
• CVE-2026-33749 Medium 6.3 n8n Vulnerable to XSS via Binary Data Inline HTML Rendering 0.3%
• CVE-2026-33724 Medium 6.3 n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no 0.3%
• CVE-2026-33722 High 7.3 n8n Has External Secrets Authorization Bypass in Credential Saving 0.3%
• CVE-2026-33720 Medium 6.3 n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK 0.2%
• CVE-2026-33713 High 8.7 n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression 0.4%
• CVE-2026-33696 Critical 9.4 n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE 0.8%
• CVE-2026-33665 High 8.8 n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover 0.3%
• CVE-2026-33663 High 8.5 n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition 0.4%
• CVE-2026-33660 Critical 9.4 n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode 1.0%
• CVE-2026-27496 High 7.1 n8n has In-Process Memory Disclosure in its Task Runner 0.3%
• CVE-2026-27498 Critical 9.0 n8n has Arbitrary Command Execution via File Write and Git Operations 0.8%
• CVE-2026-27578 High 8.5 n8n Vulnerable to Stored XSS via Various Nodes 0.2%
• CVE-2026-27577 Critical 9.4 n8n: Expression Sandbox Escape Leads to RCE 10.7%
• CVE-2026-27497 Critical 9.4 n8n has Potential Remote Code Execution via Merge Node 0.9%
• CVE-2026-27495 Critical 9.4 n8n has a Sandbox Escape in its JavaScript Task Runner 0.8%
• CVE-2026-27494 High 7.1 n8n has Arbitrary File Read via Python Code Node Sandbox Escape 0.4%
• CVE-2026-27493 Critical 9.5 n8n has Unauthenticated Expression Evaluation via Form Node 1.4%
• CVE-2026-25631 Medium 5.3 Domain allowlist bypass enables credential exfiltration 0.3%
• CVE-2026-21893 Critical 9.4 n8n Vulnerable to Command Injection in Community Package Installation 1.5%
• CVE-2026-25115 Critical 9.4 n8n is vulnerable to Python sandbox escape 0.6%
• CVE-2026-25056 Critical 9.4 n8n Arbitrary File Write leading to RCE in n8n Merge Node 0.7%
• CVE-2026-25055 High 7.1 n8n Arbitrary File Write on Remote Systems via SSH Node 1.9%
• CVE-2026-25054 High 8.5 n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI 0.2%
• CVE-2026-25053 Critical 9.4 n8n is Vulnerable to OS Command Injection in Git Node 0.6%
• CVE-2026-25052 Critical 9.4 n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users 0.3%
• CVE-2026-25051 High 8.5 n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS 0.3%
• CVE-2025-61917 High 7.7 n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner 0.4%
• CVE-2026-25049 Critical 9.4 n8n Has an Expression Escape Vulnerability Leading to RCE 1.6%
• CVE-2025-68949 Medium 5.3 n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching 0.3%
• CVE-2026-21894 Medium 6.5 n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks 0.5%
• CVE-2026-21877 Critical 10.0 n8n is vulnerable to Remote Code Execution via Arbitrary File Write 5.4%
• CVE-2026-21858 Critical 10.0 n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling 78.2%
• CVE-2025-68697 High 7.1 Self-hosted n8n has Legacy Code node that enables arbitrary file read/write 0.3%
• CVE-2025-68668 Critical 9.9 n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node 13.2%
• CVE-2025-61914 High 7.3 n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox 0.2%
• CVE-2025-65964 Critical 9.4 n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook 0.7%
• CVE-2025-62726 High 8.8 n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook 0.8%
• CVE-2025-58177 Medium 5.4 n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameter 0.2%