CVE-2026-86075: Allocation of Resources Without Limits or Throttling

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirecturis but accepted arbitrarily large clientname and granttypes values. An unauthenticated remote caller could repeatedly persist oversized values in...

PT-2026-88506

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.37.7 n8n versions prior to 2.38.2 Description The OAuth Dynamic Client Registration endpoint fails to properly validate the size of the client name and grant types variables, while only bounding redirect uris. An...