CVE-2025-58177

n8n is an open source workflow automation platform. From 1.24.0 to before 1.107.0, there is a stored cross-site scripting XSS vulnerability in @n8n/n8n-nodes-langchain.chatTrigger. An authorized user can configure the LangChain Chat Trigger node with malicious JavaScript in the initialMessages...

n8n Cross-site Scripting Vulnerabilities

n8n is a scalable workflow automation tool from n8n open source. A cross-site scripting vulnerability exists in n8n version 1.24.0 through versions prior to 1.107.0, which stems from the presence of stored cross-site scripting in the initialMessages field, which could lead to a phishing attack or...

CVE-2025-58177: Improper Neutralization of Input During Web Page Generation

n8n is an open source workflow automation platform. From 1.24.0 to before 1.107.0, there is a stored cross-site scripting XSS vulnerability in @n8n/n8n-nodes-langchain.chatTrigger. An authorized user can configure the LangChain Chat Trigger node with malicious JavaScript in the initialMessages...