EUVD-2026-101726

n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenticated OAuth authorize endpoint, which resolves clients by URL path but stores the caller's raw identifier as the record key. Unauthenticated attackers can send identifiers...

CVE-2026-110843

The n8n workflow automation tool, versions before 2.41.4 and 2.42.x before 2.42.1 , contains an uncontrolled resource consumption vulnerability (CWE-770) in the unauthenticated OAuth authorize endpoint . The root cause is that the endpoint resolves clients via URL path but stores the caller's raw...