EUVD-2026-63257

n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader derives a node's schema module path directly from the attacker-supplied node type string without validating...

CVE-2026-77068

n8n versions before 2.33.4 and 2.34.x before 2.34.1 allow an authenticated user with global:member privileges to achieve remote code execution in the n8n main process. The @n8n/workflow-sdk node-schema loader derives a schema module path directly from an attacker-supplied node type string without...

CVE-2026-77068 n8n before 2.34.1 Remote Code Execution via Path Traversal

n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader derives a node's schema module path directly from the attacker-supplied node type string without validating...

CVE-2026-18917

A heap buffer overflow in libvirt's NodeGetFreePages RPC handler allows an unprivileged local user to bypass a size check via crafted integer values, causing an undersized buffer to be overwritten with real NUMA node data, corrupting the root daemon's memory and potentially enabling denial of ser...

Malicious code in expect-dotenv (npm)

Source: amazon-inspector ffc39d28e4d33afe723182c097769f087bf528732e5468b1511bf2bff41db01e The package's main entry runs a worker that performs an HTTPS GET to https://realase-0626.vercel.app/api/v1 and passes the response's parser string into vm.runInContext, then invokes the resulting function...

CVE-2026-74250

A flaw was found in OpenStack Ironic. The autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface. This can lead to operational issues where necessary cleaning procedures are not executed. Mitigation Use an explicit...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, descheduler, cloud-provider-aws, keda, kubescape, cluster-api-ipam-provider-in-cluster, cloud-provider-azure, metallb, cluster-api, cluster-api-azure-controller, tekton-chains, kube-metrics-adapter, hubble, emissary, cass-operator,...

PT-2026-79046

Name of the Vulnerable Software and Affected Versions Apache InLong versions 2.0.0 through 2.3.x Description An issue allows any user authenticated to the manager to create, modify, and delete Data Node definitions, leading to files or directories being accessible to external parties...

PT-2026-78914

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description An unprivileged local user can exploit an integer overflow in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, resulting in an undersized memory buffe...

PT-2026-78935

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions 2.x prior to 2.33.4 n8n versions 2.34.x prior to 2.34.1 Description The Snowflake node allows an authenticated user with valid Snowflake credentials to perform arbitrary file read and write operation...

PT-2026-78924

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.33.4 n8n versions 2.34.x prior to 2.34.1 Description A remote code execution issue exists in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader determines a node's schema module path...

PT-2026-78927

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.33.4 n8n versions prior to 2.34.1 Description A PostgREST filter injection issue exists in the Supabase node during Row Get Many, Delete, and Update operations. The system constructs filte...

PT-2026-78930

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 Description Authenticated users can exploit a server-side request forgery SSRF issue in the Edit Image node's Draw Text operation. By injecting MVG Marc SVG primitives through malicious text values, an attacker c...

PT-2026-78926

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.33.4 n8n versions prior to 2.34.1 Description A NoSQL injection issue exists in the MongoDB node's Find, Delete, and Aggregate operations. The software parses the Query parameter as JSON...

PT-2026-78936

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.34.1 Description A bypass of the allowed-domains policy exists in the GraphQL node. When the Authentication parameter is configured in expression mode, all authentication-gated credential...

PT-2026-78928

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.33.4 n8n versions prior to 2.34.1 Description A stored cross-site scripting issue exists in the Form node completion page. The system only applied its sandboxing Content-Security-Policy a...

PT-2026-78939

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions 2.x prior to 2.33.4 n8n versions 2.x prior to 2.34.1 Description A code execution issue exists in the Git node. The node executes specific repository-local git configuration values without proper...

PT-2026-79133

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.4.9.11 Description A use-after-free and potential double free issue occurs involving a conflux object. This happens when a recovery leg revives a conflux set where the last linked leg has already been closed. A maliciou...

PT-2026-80741

Summary A process-global nonce cache with no eviction policy allows an unauthenticated remote attacker to exhaust server heap memory by repeatedly opening sessions, causing the node-opcua server process to crash. Affected versions: = 2.165.0 Tested version: 2.165.0 CVSS Score: 7.5 High CVSS Vecto...

PT-2026-80740

Summary A missing nonce verification in the UserNameIdentityToken authentication handler allows an unauthenticated remote attacker to forge a password token that extracts as an empty string, and to replay captured authentication tokens across sessions. Affected versions: = 2.165.0 Tested version:...