Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

n8n — Vulnerabilities & Security Advisories 228

All 228 CVE vulnerabilities found in n8n, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with n8n, a popular workflow automation platform. It focuses on weakness types typically categorized under Common Weakness Enumerations relevant to software applications and integration tools. The content collected here includes publicly disclosed vulnerabilities affecting various versions of the n8n product. The time range covered spans from the initial release of the software up to the most recent updates, ensuring a comprehensive historical view of security issues. This includes vulnerabilities that were reported, patched, or remain unresolved in specific deployments. The data is sourced from vendor advisories, open-source security databases, and community disclosures. Visitors to this page can track the vendor's security advisories to understand the response timeline and mitigation strategies for identified issues. Users can also gain a deeper understanding of specific weakness classes by examining the patterns and frequencies of reported bugs within the n8n ecosystem. Additionally, the page allows for looking up a product's vulnerability history, providing insights into the overall security posture and development practices of n8n over time. This resource is designed for security researchers, system administrators, and developers who need to assess risks associated with using or integrating n8n into their workflows. By consolidating this information, the page serves as a central reference for evaluating the stability and security of the automation platform.

Vendor: n8n-io

CVE ID Title CVSS Severity Published
CVE-2026-77069 n8n before 1.123.69 SSRF Protection Bypass via OAuth2 CWE-918 2.3 Low 2026-08-20
CVE-2026-77068 n8n before 2.34.1 Remote Code Execution via Path Traversal CWE-22 8.7 High 2026-08-20
CVE-2026-71539 n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution CWE-367 8.9 High 2026-08-18
CVE-2026-72775 n8n before 1.123.67 SQL Injection via PostgresTrigger Node CWE-89 5.8 Medium 2026-08-11
CVE-2026-72774 n8n before 1.123.67 Authentication Bypass via HTTP Request Node CWE-639 7.1 High 2026-08-11
CVE-2026-72773 n8n before 2.32.1 Path Traversal via computer-use search_files CWE-22 4.9 Medium 2026-08-11
CVE-2026-72772 n8n before 2.32.1 Authentication Bypass via Token Exchange CWE-640 8.9 High 2026-08-11
CVE-2026-72771 n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes CWE-863 7.1 High 2026-08-11
CVE-2026-72770 n8n before 1.123.67 Path Traversal via Git Node Operations CWE-22 7.1 High 2026-08-11
CVE-2026-72768 n8n before 2.32.1 SSRF Protection Bypass via MCP Client CWE-918 6.4 Medium 2026-08-11
CVE-2026-72769 n8n before 1.123.67 Prototype Pollution via VM Expression Engine CWE-1321 6.1 Medium 2026-08-11
CVE-2026-72767 n8n before 1.123.67 Remote Code Execution via Git node CWE-78 8.7 High 2026-08-11
CVE-2026-72766 n8n before 1.123.67 Arbitrary File Read via Send Email Node CWE-843 8.2 High 2026-08-11
CVE-2026-72764 n8n before 1.123.67 Module Cache Poisoning via Code Node CWE-668 5.8 Medium 2026-08-11
CVE-2026-72765 n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape CWE-94 8.7 High 2026-08-11
CVE-2026-72763 n8n before 1.123.67 Credential Exfiltration via Sub-Workflow CWE-639 7.2 High 2026-08-11
CVE-2026-72762 n8n before 1.123.67 Arbitrary File Write via Edit Image Node CWE-434 7.7 High 2026-08-11
CVE-2026-72750 n8n before 1.123.67 SQL Injection via executeQuery Operation CWE-89 5.3 Medium 2026-08-11
CVE-2026-72749 n8n before 1.123.67 Prototype Pollution via Edit Fields CWE-1321 7.1 High 2026-08-11
CVE-2026-65599 n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header CWE-312 5.1 Medium 2026-07-22
CVE-2026-65597 n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe CWE-79 8.2 High 2026-07-22
CVE-2026-65598 n8n before 1.123.64 Remote Code Execution via Git Clone CWE-367 8.9 High 2026-07-22
CVE-2026-65596 n8n before 1.123.64 Credential Exfiltration via GraphQL Node CWE-863 5.1 Medium 2026-07-22
CVE-2026-65595 n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange CWE-269 8.9 High 2026-07-22
CVE-2026-65594 n8n before 2.30.1 Missing OAuth Authorization Check CWE-863 5.1 Medium 2026-07-22
CVE-2026-65593 n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters CWE-918 6.3 Medium 2026-07-22
CVE-2026-65591 n8n before 1.123.64 Sanitizer Bypass Remote Code Execution CWE-917 8.9 High 2026-07-22
CVE-2026-65592 n8n before 1.123.64 Stored DOM XSS via cachedResultUrl CWE-79 8.4 High 2026-07-22
CVE-2026-65590 n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows CWE-78 5.5 Medium 2026-07-22
CVE-2026-65016 n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role CWE-639 7.7 High 2026-07-22

All 228 known CVE vulnerabilities affecting n8n with full Chinese analysis, references, and POCs where available.