Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

n8n — Vulnerabilities & Security Advisories 228

All 228 CVE vulnerabilities found in n8n, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with n8n, a popular workflow automation platform. It focuses on weakness types typically categorized under Common Weakness Enumerations relevant to software applications and integration tools. The content collected here includes publicly disclosed vulnerabilities affecting various versions of the n8n product. The time range covered spans from the initial release of the software up to the most recent updates, ensuring a comprehensive historical view of security issues. This includes vulnerabilities that were reported, patched, or remain unresolved in specific deployments. The data is sourced from vendor advisories, open-source security databases, and community disclosures. Visitors to this page can track the vendor's security advisories to understand the response timeline and mitigation strategies for identified issues. Users can also gain a deeper understanding of specific weakness classes by examining the patterns and frequencies of reported bugs within the n8n ecosystem. Additionally, the page allows for looking up a product's vulnerability history, providing insights into the overall security posture and development practices of n8n over time. This resource is designed for security researchers, system administrators, and developers who need to assess risks associated with using or integrating n8n into their workflows. By consolidating this information, the page serves as a central reference for evaluating the stability and security of the automation platform.

Vendor: n8n-io

CVE ID Title CVSS Severity Published
CVE-2026-65589 n8n before 1.123.64 Credential Exposure via LLM Node Execution Data CWE-532 5.1 Medium 2026-07-22
CVE-2026-65015 n8n before 2.30.1 Privilege Escalation via run_node_tool CWE-863 7.2 High 2026-07-22
CVE-2026-65014 n8n before 2.28.0 Authentication Bypass via test-webhook CWE-306 6.3 Medium 2026-07-22
CVE-2026-59259 n8n - Permission Bypass via Expression Parser Mismatch in External Secrets CWE-639 6.0 Medium 2026-07-15
CVE-2026-59254 n8n - External Secrets Disclosure via Workflow Node Expressions CWE-639 6.3 Medium 2026-07-15
CVE-2026-56353 n8n - Authentication Bypass in Chat Trigger Node CWE-287 4.8 Medium 2026-07-15
CVE-2026-56352 n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter CWE-22 6.4 Medium 2026-07-15
CVE-2026-56349 n8n - Guardrail Node Bypass via Crafted Input CWE-20 - - 2026-07-15
CVE-2026-58661 n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint CWE-770 5.3 Medium 2026-07-10
CVE-2026-56354 n8n - Cross-Site Scripting and Open Redirect in Form Node CWE-79 4.1 Medium 2026-07-10
CVE-2026-59209 n8n: Shared Credential Header Leak via HTTP Request Pagination Expression CWE-522 - - 2026-07-09
CVE-2026-59206 n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration CWE-1321 - - 2026-07-09
CVE-2026-59208 n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution CWE-287 - - 2026-07-09
CVE-2026-59207 n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector CWE-693 - - 2026-07-09
CVE-2026-59257 n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation CWE-89 5.3 Medium 2026-07-08
CVE-2026-59253 n8n - Improper Authorization in Workflow Assignment to Folders CWE-639 - - 2026-07-08
CVE-2026-56778 n8n - Authorization Bypass in Public API Execution Retry Endpoint CWE-863 6.4 Medium 2026-07-08
CVE-2026-56776 n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint CWE-863 7.4 High 2026-07-08
CVE-2026-56775 n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints CWE-863 5.4 Medium 2026-07-08
CVE-2026-56360 n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger CWE-290 4.0 Medium 2026-07-08
CVE-2026-56359 n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL CWE-79 5.4 Medium 2026-07-08
CVE-2025-71380 n8n - Arbitrary Command Execution via Execute Command Node CWE-284 8.8 High 2026-07-04
CVE-2026-56777 n8n - AST Validator Bypass in Python Code Node CWE-184 5.0 Medium 2026-06-30
CVE-2026-56356 n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field CWE-79 5.4 Medium 2026-06-30
CVE-2026-56350 n8n - SSO Enforcement Bypass via API CWE-285 6.3 Medium 2026-06-30
CVE-2026-56358 n8n - Stored Cross-Site Scripting in Form Trigger Node CWE-79 5.4 Medium 2026-06-24
CVE-2026-56351 n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes CWE-89 8.2 High 2026-06-24
CVE-2026-44792 n8n: Source Control Pull SQL Injection CWE-89 - - 2026-06-23
CVE-2026-44791 n8n: XML Node Prototype Pollution Patch Bypass CWE-1321 - - 2026-06-23
CVE-2026-44790 n8n: Arbitrary File Read via Git Node CWE-88 - - 2026-06-23

All 228 known CVE vulnerabilities affecting n8n with full Chinese analysis, references, and POCs where available.