Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

n8n — Vulnerabilities & Security Advisories 228

All 228 CVE vulnerabilities found in n8n, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with n8n, a popular workflow automation platform. It focuses on weakness types typically categorized under Common Weakness Enumerations relevant to software applications and integration tools. The content collected here includes publicly disclosed vulnerabilities affecting various versions of the n8n product. The time range covered spans from the initial release of the software up to the most recent updates, ensuring a comprehensive historical view of security issues. This includes vulnerabilities that were reported, patched, or remain unresolved in specific deployments. The data is sourced from vendor advisories, open-source security databases, and community disclosures. Visitors to this page can track the vendor's security advisories to understand the response timeline and mitigation strategies for identified issues. Users can also gain a deeper understanding of specific weakness classes by examining the patterns and frequencies of reported bugs within the n8n ecosystem. Additionally, the page allows for looking up a product's vulnerability history, providing insights into the overall security posture and development practices of n8n over time. This resource is designed for security researchers, system administrators, and developers who need to assess risks associated with using or integrating n8n into their workflows. By consolidating this information, the page serves as a central reference for evaluating the stability and security of the automation platform.

Vendor: n8n-io

CVE ID Title CVSS Severity Published
CVE-2026-86993 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check CWE-862 5.9 Medium 2026-09-08
CVE-2026-86994 n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter CWE-862 5.3 Medium 2026-09-08
CVE-2026-86995 n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read CWE-73 5.3 Medium 2026-09-08
CVE-2026-86996 n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy CWE-862 5.3 Medium 2026-09-08
CVE-2026-86074 n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content CWE-918 5.9 Medium 2026-09-08
CVE-2026-86073 n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution CWE-863 5.9 Medium 2026-09-08
CVE-2026-85173 n8n before 2.36.2 Missing Authorization via Insights API CWE-639 5.3 Medium 2026-09-03
CVE-2026-85172 n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass CWE-918 5.3 Medium 2026-09-03
CVE-2026-85171 n8n before 1.123.73 Credential Exposure via Error Logging CWE-532 7.1 High 2026-09-03
CVE-2026-85169 n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak CWE-94 8.7 High 2026-09-03
CVE-2026-85170 n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes CWE-20 7.1 High 2026-09-03
CVE-2026-85168 n8n before 1.123.73 Remote Code Execution via Git Node CWE-78 7.7 High 2026-09-03
CVE-2026-85167 n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes CWE-943 6.3 Medium 2026-09-03
CVE-2026-85166 n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node CWE-863 7.2 High 2026-09-03
CVE-2026-85165 n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement CWE-95 7.2 High 2026-09-03
CVE-2026-77085 n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool CWE-918 6.3 Medium 2026-08-20
CVE-2026-77084 n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values CWE-78 7.7 High 2026-08-20
CVE-2026-77083 n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution CWE-1321 6.0 Medium 2026-08-20
CVE-2026-77082 n8n before 1.123.69 ReDoS via Filter and Switch Node CWE-1333 5.3 Medium 2026-08-20
CVE-2026-77081 n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node CWE-639 5.1 Medium 2026-08-20
CVE-2026-77079 n8n before 2.34.1 Authorization Bypass via Custom Role Deletion CWE-639 7.4 High 2026-08-20
CVE-2026-77080 n8n before 1.123.69 Arbitrary File Read and Write via Snowflake CWE-78 8.7 High 2026-08-20
CVE-2026-77077 n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution CWE-94 7.2 High 2026-08-20
CVE-2026-77076 n8n before 1.123.69 Credential Leak via GraphQL Node Error CWE-209 7.1 High 2026-08-20
CVE-2026-77075 n8n before 1.123.69 Expression Injection via Resource Locator CWE-94 8.4 High 2026-08-20
CVE-2026-77074 n8n before 1.123.69 SSRF via Edit Image Node CWE-94 6.0 Medium 2026-08-20
CVE-2026-77073 n8n before 2.34.1 Cross-Project Credential Access via MCP CWE-639 5.3 Medium 2026-08-20
CVE-2026-77072 n8n before 1.123.69 Stored XSS via Form Completion Page CWE-79 8.4 High 2026-08-20
CVE-2026-77071 n8n before 1.123.69 PostgREST Filter Injection via Supabase CWE-89 7.1 High 2026-08-20
CVE-2026-77070 n8n before 1.123.69 NoSQL Injection via MongoDB Node CWE-943 7.1 High 2026-08-20

All 228 known CVE vulnerabilities affecting n8n with full Chinese analysis, references, and POCs where available.