Vulnerability index

Browse CVEs

115 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

N8n MEDIUM 5.4
CVE-2026-56358

n8n before 1.123.25 (1.x) and before 2.11.2 (2.x), with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in the …

Fix: 1.123.25 / 2.11.2+
Fix from $1,600 2026-06-24
N8n CRITICAL 9.6
CVE-2026-54307

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflo…

Fix: 1.123.55 / 2.25.7+
Fix from $2,300 2026-06-23
N8n HIGH 7.2
CVE-2026-54308

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent365Trigger and StripeTrigger node did not validate …

Fix: 2.25.7 / 2.26.2+
Fix from $1,950 2026-06-23
N8n CRITICAL 9.9
CVE-2026-54305

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature…

Fix: 1.123.55 / 2.25.7+
Fix from $2,300 2026-06-23
N8n HIGH 7.7
CVE-2026-54304

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authenticated user with permission to create or modify …

Fix: 1.123.55 / 2.25.7+
Fix from $1,950 2026-06-23
N8n MEDIUM 6.4
CVE-2026-54306

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototype pollution vulnerability allowed a crafted public webhook …

Fix: 2.25.7 / 2.26.2+
Fix from $1,600 2026-06-23
N8n MEDIUM 5.4
CVE-2026-54301

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could conf…

Fix: 1.123.55 / 2.25.7+
Fix from $1,600 2026-06-23
N8n MEDIUM 5.4
CVE-2026-54302

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could inje…

Fix: 1.123.55 / 2.25.7+
Fix from $1,600 2026-06-23
N8n HIGH 7.7
CVE-2026-49465

n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify …

Fix: 1.123.48 / 2.21.8+
Fix from $1,950 2026-06-23
N8n HIGH 8.5
CVE-2026-49444

n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify …

Fix: 1.123.48 / 2.21.8+
Fix from $1,950 2026-06-23
N8n HIGH 8.1
CVE-2026-45732

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credential reconnect endpoints autho…

Fix: 1.123.43 / 2.20.7+
Fix from $1,950 2026-06-23
N8n CRITICAL 9.9
CVE-2026-44789

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify …

Fix: 1.123.43 / 2.20.7+
Fix from $2,300 2026-06-23
N8n CRITICAL 9.9
CVE-2026-44791

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify …

Fix: 1.123.43 / 2.20.7+
Fix from $2,300 2026-06-23
N8n CRITICAL 9.0
CVE-2026-44792

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connec…

Fix: 1.123.43 / 2.20.7+
Fix from $2,300 2026-06-23
N8n HIGH 8.8
CVE-2026-44790

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify …

Fix: 1.123.43 / 2.20.7+
Fix from $1,950 2026-06-23
N8n HIGH 8.5
CVE-2026-54312

n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achiev…

Fix: 2.24.0+
Fix from $1,950 2026-06-23
N8n HIGH 7.7
CVE-2026-54311

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows c…

Fix: 2.25.7 / 2.26.2+
Fix from $1,950 2026-06-23
N8n HIGH 7.7
CVE-2026-54313

n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter …

Fix: 2.24.0+
Fix from $1,950 2026-06-23
N8n HIGH 7.5
CVE-2026-54314

n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archive…

Fix: 2.24.0+
Fix from $1,950 2026-06-23
N8n CRITICAL 10.0
CVE-2026-54309

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint…

Fix: 2.25.7 / 2.26.2+
Fix from $2,300 2026-06-23
N8n CRITICAL 9.9
CVE-2026-54310

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows c…

Fix: 2.25.7 / 2.26.2+
Fix from $2,300 2026-06-23
N8n MEDIUM 5.4
CVE-2026-54303

n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query param…

Fix: 2.24.0+
Fix from $1,600 2026-06-23
N8n CRITICAL 9.9
CVE-2026-56348

n8n before 2.20.0 contains a credential exfiltration vulnerability in the POST /rest/dynamic-node-parameters/options endpoint that allows authenticat…

Fix: 2.20.0+
Fix from $2,300 2026-06-22
N8n MEDIUM 5.3
CVE-2026-56357

n8n before 1.123.15 and 2.5.0 contains a webhook forgery vulnerability in the GitHub Webhook Trigger node that fails to implement HMAC-SHA256 signatu…

Fix: 1.123.15 / 2.5.0+
Fix from $1,600 2026-06-22
N8n CRITICAL 9.6
CVE-2026-42235

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an unauthenticated attacker could register a mali…

Fix: 1.123.32 / 2.17.4+
Fix from $2,300 2026-05-04
N8n HIGH 8.8
CVE-2026-42234

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create o…

Fix: 1.123.32 / 2.17.4+
Fix from $1,950 2026-05-04
N8n HIGH 8.8
CVE-2026-42237

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the…

Fix: 1.123.32 / 2.17.4+
Fix from $1,950 2026-05-04
N8n HIGH 7.5
CVE-2026-42236

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the MCP OAuth client registration endpoint accept…

Fix: 1.123.32+
Fix from $1,950 2026-05-04
N8n CRITICAL 9.8
CVE-2026-42233

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the Oracle Database node's select opera…

Fix: 1.123.32 / 2.17.4+
Fix from $2,300 2026-05-04
N8n HIGH 8.8
CVE-2026-42229

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the SeaTable node's row:search and row:…

Fix: 1.123.32 / 2.17.4+
Fix from $1,950 2026-05-04