CVE-2026-110842— n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter
Quick assessment
Affected
n8n-io n8n
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 n8n 版本 2.41.4 之前以及 2.42.x 系列中 2.42.1 之前的版本中，MCP 工作流验证工具存在原型污染漏洞。该工具的解释器在主进程中评估由调用方提供的代码，读取继承属性，并允许向共享原型赋值。即使身份认证用户仅拥有 workflow:read（工作流读取）权限，也可替换内置方法，使其返回真值，从而绕过服务器端权限检查，接受未授权的权限范围，进而接管未启用多因素认证（MFA）的拥有者账户。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110842
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter
Source: CVE Program / CVE List V5
Vulnerability Description
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holding only a workflow:read grant can replace a built-in method with one returning a truthy value so server-side permission checks accept unheld scopes, enabling takeover of owner accounts not protected by MFA.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1321
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-110842
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110842
请登录查看更多情报信息。
Other References for CVE-2026-110842 (2)
Same Patch Batch · n8n-io · 2026-10-14 · 14 CVEs total
| CVE-2026-110843 | 8.2 HIGH | n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Author |
| CVE-2026-110845 | 7.7 HIGH | n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation |
| CVE-2026-110850 | 7.2 HIGH | n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters |
| CVE-2026-110844 | 7.2 HIGH | n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows |
| CVE-2026-110849 | 7.2 HIGH | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview |
| CVE-2026-110853 | 7.1 HIGH | n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON |
| CVE-2026-110846 | 7.0 HIGH | n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook |
| CVE-2026-110847 | 7.0 HIGH | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter |
| CVE-2026-110840 | 7.0 HIGH | n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field |
| CVE-2026-110852 | 6.3 MEDIUM | n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Pat |
| CVE-2026-110851 | 6.1 MEDIUM | n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endp |
| CVE-2026-110841 | 6.1 MEDIUM | n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval |
| CVE-2026-110848 | 6.0 MEDIUM | n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connec |
IV. Related Vulnerabilities
Same product: n8n
-
CVE-2026-110853
n8n before 1.123.83 Authorization Bypass via Execute Sub-wor -
CVE-2026-110852
n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Work -
CVE-2026-110851
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership T -
CVE-2026-110850
n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Age -
CVE-2026-110849
n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binar
Same vendor: n8n-io
-
CVE-2026-110853
n8n before 1.123.83 Authorization Bypass via Execute Sub-wor -
CVE-2026-110852
n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Work -
CVE-2026-110851
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership T -
CVE-2026-110850
n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Age -
CVE-2026-110849
n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binar
Same weakness: CWE-1321
-
CVE-2026-111172
@casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rul -
CVE-2026-106160
Prototype Pollution via Model.accept and kendo.setter in Ken -
CVE-2026-110848
n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution -
CVE-2026-110111
Xen Orchestra before 6.9.0 Privilege Escalation via Prototyp -
CVE-2026-109758
Perforce HAS 2022.1-2025.2 默认凭证致未授权访问
V. Comments for CVE-2026-110842
No comments yet