n8n Node.js Package < 1.123.76 / 2.0.x < 2.37.7 / 2.38.x < 2.38.2 Multiple Vulnerabilities

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(347980);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/21");

  script_cve_id("CVE-2026-86081", "CVE-2026-86082", "CVE-2026-86083");
  script_xref(name:"IAVB", value:"2026-B-0255");

  script_name(english:"n8n Node.js Package < 1.123.76 / 2.0.x < 2.37.7 / 2.38.x < 2.38.2 Multiple Vulnerabilities");

  script_set_attribute(attribute:"synopsis", value:
"The n8n Node.js Package installed on the remote host is affected by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The version of the n8n Node.js Package installed on the remote host is less than 1.123.76, or is 2.0.x prior to
2.37.7, or is 2.38.x prior to 2.38.2. It is, therefore, affected by multiple vulnerabilities:

  - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and
    2.38.2, the legacy expression engine generated source text by calling the mutable
    global JSON.stringify while printing synthetic string literals and interpolating
    timezone data. An expression could replace JSON.stringify and cause later generated
    source to contain executable attacker-controlled code. The affected code-generation
    paths include packages/@n8n/expression-runtime/src/bridge/isolated-vm-bridge.ts and
    packages/@n8n/tournament/src/ExpressionBuilder.ts, and the issue does not affect the
    vm expression engine. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.
    (CVE-2026-86083)

  - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and
    2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions
    for normal calls but not for the model-search dropdown. A workflow editor could set
    options.baseURL to an arbitrary host and make the searchModels path send the
    openAiApi credential there. The affected implementation is
    packages/@n8n/nodes-langchain/nodes/llms/LMChatOpenAi/methods/loadModels.ts, which
    omitted assertOpenAiCredentialAllowsUrl. This issue is fixed in versions 1.123.76,
    2.37.7 and 2.38.2. (CVE-2026-86082)

  - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and
    2.38.2, the Git node clone operation matched an attacker-controlled destination path
    against the default N8N_BLOCK_FILE_PATTERNS regular expression. The pattern allowed
    catastrophic backtracking and ran synchronously in the main n8n process. An
    authenticated workflow editor could therefore freeze the instance with one workflow
    execution; the affected default is declared in
    packages/@n8n/config/src/configs/security.config.ts. This issue is fixed in versions
    1.123.76, 2.37.7 and 2.38.2. (CVE-2026-86081)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://github.com/n8n-io/n8n/security/advisories/GHSA-34ff-336r-5q23");
  script_set_attribute(attribute:"see_also", value:"https://github.com/n8n-io/n8n/security/advisories/GHSA-6xcw-7xm6-48c6");
  script_set_attribute(attribute:"see_also", value:"https://github.com/n8n-io/n8n/security/advisories/GHSA-j535-v25q-vx3q");
  script_set_attribute(attribute:"solution", value:
"Upgrade to n8n Node.js Package version 1.123.76, 2.37.7, 2.38.2 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-86083");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/08");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/02");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"asset_categories", value:"component");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:n8n:n8n");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("nodejs_modules_win_installed.nbin", "nodejs_modules_linux_installed.nbin", "nodejs_modules_mac_installed.nbin");
  script_require_keys("Host/nodejs/modules/enumerated");

  exit(0);
}

include('vcf_extras_nodejs.inc');

get_kb_item_or_exit('Host/nodejs/modules/enumerated');

var app = 'n8n';
var app_info = vcf_extras::nodejs_modules::get_app_info(app:app);

if (empty_or_null(app_info))
  audit(AUDIT_NOT_INST, app);

var constraints = [
  {'fixed_version':'1.123.76'},
  {'min_version':'2.0.0', 'fixed_version':'2.37.7'},
  {'min_version':'2.38.0', 'fixed_version':'2.38.2'}
];

vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE);