Browse CVEs

MEDIUM 5.4 CVE-2026-56358 n8n before 1.123.25 (1.x) and before 2.11.2 (2.x), with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in the … N8n 1.123.25 / 2.11.2+ Fix from $1,6002026-06-24 CRITICAL 9.6 CVE-2026-54307 n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflo… N8n 1.123.55 / 2.25.7+ Fix from $2,3002026-06-23 HIGH 7.2 CVE-2026-54308 n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent365Trigger and StripeTrigger node did not validate … N8n 2.25.7 / 2.26.2+ Fix from $1,9502026-06-23 CRITICAL 9.9 CVE-2026-54305 n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature… N8n 1.123.55 / 2.25.7+ Fix from $2,3002026-06-23 HIGH 7.7 CVE-2026-54304 n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authenticated user with permission to create or modify … N8n 1.123.55 / 2.25.7+ Fix from $1,9502026-06-23 MEDIUM 6.4 CVE-2026-54306 n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototype pollution vulnerability allowed a crafted public webhook … N8n 2.25.7 / 2.26.2+ Fix from $1,6002026-06-23 MEDIUM 5.4 CVE-2026-54301 n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could conf… N8n 1.123.55 / 2.25.7+ Fix from $1,6002026-06-23 MEDIUM 5.4 CVE-2026-54302 n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could inje… N8n 1.123.55 / 2.25.7+ Fix from $1,6002026-06-23 HIGH 7.7 CVE-2026-49465 n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify … N8n 1.123.48 / 2.21.8+ Fix from $1,9502026-06-23 HIGH 8.5 CVE-2026-49444 n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify … N8n 1.123.48 / 2.21.8+ Fix from $1,9502026-06-23 HIGH 8.1 CVE-2026-45732 n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credential reconnect endpoints autho… N8n 1.123.43 / 2.20.7+ Fix from $1,9502026-06-23 CRITICAL 9.9 CVE-2026-44789 n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify … N8n 1.123.43 / 2.20.7+ Fix from $2,3002026-06-23 CRITICAL 9.9 CVE-2026-44791 n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify … N8n 1.123.43 / 2.20.7+ Fix from $2,3002026-06-23 CRITICAL 9.0 CVE-2026-44792 n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connec… N8n 1.123.43 / 2.20.7+ Fix from $2,3002026-06-23 HIGH 8.8 CVE-2026-44790 n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify … N8n 1.123.43 / 2.20.7+ Fix from $1,9502026-06-23 HIGH 8.5 CVE-2026-54312 n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achiev… N8n 2.24.0+ Fix from $1,9502026-06-23 HIGH 7.7 CVE-2026-54311 n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows c… N8n 2.25.7 / 2.26.2+ Fix from $1,9502026-06-23 HIGH 7.7 CVE-2026-54313 n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter … N8n 2.24.0+ Fix from $1,9502026-06-23 HIGH 7.5 CVE-2026-54314 n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archive… N8n 2.24.0+ Fix from $1,9502026-06-23 CRITICAL 10.0 CVE-2026-54309 n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint… N8n 2.25.7 / 2.26.2+ Fix from $2,3002026-06-23 CRITICAL 9.9 CVE-2026-54310 n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows c… N8n 2.25.7 / 2.26.2+ Fix from $2,3002026-06-23 MEDIUM 5.4 CVE-2026-54303 n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query param… N8n 2.24.0+ Fix from $1,6002026-06-23 CRITICAL 9.9 CVE-2026-56348 n8n before 2.20.0 contains a credential exfiltration vulnerability in the POST /rest/dynamic-node-parameters/options endpoint that allows authenticat… N8n 2.20.0+ Fix from $2,3002026-06-22 MEDIUM 5.3 CVE-2026-56357 n8n before 1.123.15 and 2.5.0 contains a webhook forgery vulnerability in the GitHub Webhook Trigger node that fails to implement HMAC-SHA256 signatu… N8n 1.123.15 / 2.5.0+ Fix from $1,6002026-06-22 CRITICAL 9.6 CVE-2026-42235 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an unauthenticated attacker could register a mali… N8n 1.123.32 / 2.17.4+ Fix from $2,3002026-05-04 HIGH 8.8 CVE-2026-42234 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create o… N8n 1.123.32 / 2.17.4+ Fix from $1,9502026-05-04 HIGH 8.8 CVE-2026-42237 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the… N8n 1.123.32 / 2.17.4+ Fix from $1,9502026-05-04 HIGH 7.5 CVE-2026-42236 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the MCP OAuth client registration endpoint accept… N8n 1.123.32+ Fix from $1,9502026-05-04 CRITICAL 9.8 CVE-2026-42233 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the Oracle Database node's select opera… N8n 1.123.32 / 2.17.4+ Fix from $2,3002026-05-04 HIGH 8.8 CVE-2026-42229 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the SeaTable node's row:search and row:… N8n 1.123.32 / 2.17.4+ Fix from $1,9502026-05-04