n8n vulnerabilities

CVEs whose affected-version data names the n8n package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

107 CVEsRSS

CVE-2026-72769High· 8.1

1mo ago

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expression engine

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expression engine. An authenticated user able to create or edit a workflow expression can abuse the engine's array-element access to obtain a …

▾ Twilightn8n · n8nEPSS 0.51%via NVD

CVE-2026-72767High· 8.8

1mo ago

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that cau…

▾ Twilightn8n · n8nEPSS 0.88%via NVD

CVE-2026-72764High· 8.8

1mo ago

n8n's JavaScript task runner shared a single module cache across all users' Code-node executions

n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions (before 1.123.67, 2.31.5, and 2.32.1), a user able to run a Code node could poison a cached module and thereby alter o…

▾ Twilightn8n · n8nEPSS 0.81%via NVD

CVE-2026-72762High· 8.8

1mo ago

n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation

n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation. An authenticated user abl…

n8n vulnerabilities

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expression engine

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node

n8n's JavaScript task runner shared a single module cache across all users' Code-node executions

n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation

n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner

n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances

n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

Duplicate Advisory: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data

Duplicate Advisory: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check

Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Duplicate Advisory: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction

n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

n8n: SSRF Protection Bypass via MCP Client Node

n8n: Authenticated code execution in the n8n Git node

n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion

n8n: Expression sandbox escape via arrow-function bodies enabling command execution

n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`

n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON

n8n: Edit Image Node Format Injection Allows Arbitrary File Write

n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service

n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service

n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory

n8n: External Secrets Permission Bypass via Expression Parser Mismatch

n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

n8n: External Secrets Accessible via Workflow Expressions Outside Credentials

n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows

n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check

n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction