266018 matches found
n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction
Impact The GraphQL node did not enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials such as Header Auth, Basic Auth, Query Auth, and OAuth, unlike the HTTP Request node. An authenticated user able to create or edit workflows could therefore point the node's endpoint a...
GHSA-GQ66-9CW5-J5JM n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction
Impact The GraphQL node did not enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials such as Header Auth, Basic Auth, Query Auth, and OAuth, unlike the HTTP Request node. An authenticated user able to create or edit workflows could therefore point the node's endpoint a...
Incorrect Authorization
Overview @n8n/n8n-nodes-langchain is a Affected versions of this package are vulnerable to Incorrect Authorization in the OAuth 2.1 authorization. An attacker can gain unauthorized access to another user's workflow and execute it with the owner's credentials by registering an OAuth client and...
EUVD-2026-44634
n8n: External Secrets Accessible via Workflow Expressions Outside Credentials...
External Control of File Name or Path
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to External Control of File Name or Path via the Edit Image. An attacker can write arbitrary files outside the intended directory by supplying crafted values to the output format parameter. Workaround...
NPM: n8n: Edit Image Node Format Injection Allows Arbitrary File Write
NPM: n8n: Edit Image Node Format Injection Allows Arbitrary File Write vulnerability discovered by ? in WordPress Npm n8n versions 1.123.67...
GHSA-XMC9-4F2H-JF9C n8n: Edit Image Node Format Injection Allows Arbitrary File Write
Impact The n8n Edit Image node passed its output format to the underlying image library without validation, so a crafted value could write bytes to a location outside the node's working directory. An authenticated user able to run workflows could use this to write arbitrary files in the n8n...
n8n: Edit Image Node Format Injection Allows Arbitrary File Write
Impact The n8n Edit Image node passed its output format to the underlying image library without validation, so a crafted value could write bytes to a location outside the node's working directory. An authenticated user able to run workflows could use this to write arbitrary files in the n8n...
NPM: n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`
NPM: n8n: Credential Authorization Bypass via Expression in HTTP Request Node genericAuthType vulnerability discovered by ? in WordPress Npm n8n versions 1.123.67...
n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`
Impact An authenticated member with edit access to a shared workflow could reference another user's credential in an HTTP Request node while specifying the credential type through an expression. Because the pre-execution permission check compared the unresolved expression instead of the real...
GHSA-6QC9-MQVW-JG7X n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`
Impact An authenticated member with edit access to a shared workflow could reference another user's credential in an HTTP Request node while specifying the credential type through an expression. Because the pre-execution permission check compared the unresolved expression instead of the real...
Incorrect Authorization
Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to Incorrect Authorization via the genericAuthType in the HTTP Request node. An attacker can gain unauthorized access to credentials belonging to other users by referencing another user's credential...
Server-side Request Forgery (SSRF)
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper handling of message fields in the Send Email node. An attacker can access arbitrary files or initiate unauthorized network requests by supplying crafted...
NPM: n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion
NPM: n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion vulnerability discovered by ? in WordPress Npm n8n versions 1.123.67...
GHSA-2X35-3FW4-9JR4 n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion
Impact The n8n Send Email node did not enforce that its message fields were strings, so a crafted untrusted non-string value from a workflow expression could be treated by the underlying mail library as a file path or URL. This could allow disclosure of local files on the n8n host. Exploitation...
GHSA-RCV6-PVRJ-4XCG n8n: Authenticated code execution in the n8n Git node
Impact Authenticated n8n users with rights to create and execute workflows could achieve code execution on the n8n host. Using the Git node, under the default git security settings, by staging a crafted local repository, an attacker could cause git to run hooks, executing arbitrary commands as th...
Command Injection
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Command Injection via the Git node. An attacker can execute arbitrary commands as the application process user by crafting a local repository to trigger git hooks during workflow execution. Note: Th...
n8n: Authenticated code execution in the n8n Git node
Impact Authenticated n8n users with rights to create and execute workflows could achieve code execution on the n8n host. Using the Git node, under the default git security settings, by staging a crafted local repository, an attacker could cause git to run hooks, executing arbitrary commands as th...