N8n Oracle Database Node Code Execution

The vulnerability of the Oracle Database Node component of the N8n automation platform relates to the lack of measures taken to protect the SQL query structure during the processing of the LIMIT field. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code a...

N8n Prototype Object Code Execution

The vulnerability of the N8n automation platform lies in the uncontrolled changes to the attributes of the prototype object. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

N8n Access Control Bypass

The vulnerability of the N8n automation platform is related to errors in access control. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

CVE-2025-52554 n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflows

n8n is a workflow automation platform. Prior to version 1.99.1, an authorization vulnerability was discovered in the /rest/executions/:id/stop endpoint of n8n. An authenticated user can stop workflow executions that they do not own or that have not been shared with them, leading to potential...