1803 matches found
PT-2026-70170
n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. Attackers can craft workflows that send requests to internal or blocked hosts without routing through SSRF protection...
PT-2026-70164
n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation. An authenticated user able to run workflows can supply a crafted format value to writ...
PT-2026-70176
n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credential type via an expression. Because the pre-execution...
PT-2026-70162
n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields Set node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a field after an inherited built-in method pat...
PT-2026-70174
n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...
CVE-2026-21858-and-CVE-2025-68613
Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 —...
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no...
n8n Node.js Package < 2.27.4 / 2.28.0 < 2.28.1 Account Takeover (CVE-2026-59208)
The version of the n8n Node.js Package installed on the remote host is prior to 2.27.4, or is 2.28.x prior to 2.28.1. It is, therefore, affected by an account takeover vulnerability: - n8n is an open source workflow automation platform. Prior to 2.27.4 and from 2.28.0 prior to 2.28.1, n8n instanc...
ROOT-APP-NPM-CVE-2026-44790 CVE-2026-44790 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-44790 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54306 CVE-2026-54306 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54306 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-JWM3-QCFW-C5PP GHSA-jwm3-qcfw-c5pp in @rootio/n8n - Patched by Root
Root has patched GHSA-jwm3-qcfw-c5pp in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-45732 CVE-2026-45732 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-45732 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54314 CVE-2026-54314 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54314 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-664H-GPGQ-H6XX GHSA-664h-gpgq-h6xx in @rootio/n8n - Patched by Root
Root has patched GHSA-664h-gpgq-h6xx in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54312 CVE-2026-54312 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54312 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54307 CVE-2026-54307 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54307 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54308 CVE-2026-54308 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54308 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54303 CVE-2026-54303 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54303 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...