gha-lab-ee08e207a8

Artefacto de investigación automatizado — no es el proyecto original. Este repositorio es un laboratorio desechable construido por un sistema automatizado para una tesis de maestría en la Université Laval sobre la reproducción de vulnerabilidades publicadas en flujos de trabajo de GitHub Actions...

CVE-2026-75898

CVE-2026-75898 — Componente SSRF en Invoke de RAGFlow Server-Side Request Forgery CWE-918 en el componente "Invoke" del flujo de trabajo de agentes de RAGFlow, antes de 0.26.3. | ---|--- CVE| CVE-2026-75898 CVSS| 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Corregido en| v0.26.3 Commits de...

CVE-2026-42228

GHSA-f77h-j2v7-g6mw — Secuestro de ejecución de chat no autenticado en n8n CVE: CVE-2026-42228 Severidad: Alta Afectado: n8n 1.123.32 Corregido en: n8n 1.123.32 / 2.17.4 / 2.18.1 Resumen de la vulnerabilidad chat-service.ts :: startSession acepta un executionId de la cadena de consulta del...

CVE-2026-26720-Twenty-RCE

Twenty CRM - Ejecución Remota de Código Autenticada RCE Resumen Producto: Twenty CRM Vulnerabilidad: Ejecución Remota de Código RCE a través de Funciones Serverless de Workflows Severidad: Crítica Componente Afectado: Automatización de Workflows Código - Función Serverless Versión Probada: v1.15....

CVE-2026-39866

CVE-2026-39866 — Inyección de comandos mediante entrada no citada en workflow dispatch Laboratorio de prueba de concepto para inyección de comandos en GitHub Actions workflow dispatch Propósito CVE-2026-39866 es un fallo de inyección de comandos en el workflow de lanzamiento de GitHub Actions de...

Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs

ImpactThis is an authorization bypass that escalates into unauthorized server-side job execution.1. Primary impact - self-approval: The approver checks approver-group membership, change permission on the object under review, one-response-per-user are enforced only in the approve/deny actions on...

isa_recovery

Sistema de Recuperación ISA Un pipeline de ingeniería inversa que convierte un binario de firmware y su desensamblado posiblemente incorrecto en una especificación de procesador funcional para Ghidra. Cuando te encuentras con un procesador propietario sin documentación y sin soporte en Ghidra, es...

CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-

CVE-2026-34156 – Escape del Sandbox de NocoBase RCE -orange Ejecución Remota de Código autenticada en versiones de NocoBase ≤ 2.0.26 mediante escape del sandbox del flujo de trabajo. 📋 Descripción CVE-2026-34156 es una vulnerabilidad de escape del sandbox en el motor de flujo de trabajo de...

Blackash-CVE-2025-68613

🚨 CVE-2025-68613 — n8n 中的严重 RCE 漏洞 严重性： 🔴 严重 影响： 远程代码执行 受影响平台： n8n（工作流自动化） 🧩 概述 CVE-2025-68613 是 n8n （一个开源工作流自动化平台）中的一个严重安全漏洞 。 该问题允许经过身份验证的攻击者 通过滥用工作流表达式的求值方式，在服务器上执行任意代码 。 🎯 漏洞详情 类型： 表达式注入 → 远程代码执行 CWE： CWE-913 — 对动态管理的代码资源的控制不当 攻击向量： 网络 所需权限： 低（已认证用户） 用户交互： 无 影响范围： 已更改 💥 为什么危险： 恶意表达式在没有适当沙箱隔离...

Analysis-And-POC-N8N-CVE-2025-68613

概述（n8n 与 CVE-2025-68613） n8n 是一个工作流自动化平台，用于通过可视化流程和 JavaScript 表达式来集成系统与服务。 CVE-2025-68613 是一个严重的远程代码执行（RCE）漏洞 ，CVSS 评分为 9.9，影响多个版本的 n8n。该漏洞出现在受影响版本中，工作流中 JavaScript 表达式的处理未得到适当隔离。这允许拥有编辑权限的认证用户在应用程序预期行为之外执行代码 。 在实践中，该漏洞可被利用来在运行 n8n 的服务器上以应用程序自身的权限执行命令。受影响版本范围从 0.211.0 到 1.120.4 、1.121.1 和 1.122....

CVE-2026-103249

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

CVE-2026-103249 n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

EUVD-2026-90643

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

CVE-2026-103249 n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

CVE-2026-103247 n8n before 1.123.80 Credential Tampering via Duplicate Node IDs

n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...

CVE-2026-103245 n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node webhook handler. Unauthenticated attackers can send forged webhook requests with attacker-controlled payloads to trigger workflows and...

EUVD-2026-90749

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node webhook handler. Unauthenticated attackers can send forged webhook requests with attacker-controlled payloads to trigger workflows and...

n8n-cve-2025-68613

CVE-2025-68613 – n8n 表达式注入远程代码执行漏洞 该工具包提供了针对 n8n 工作流自动化平台 上关键漏洞 CVE-2025-68613 的 扫描器与 PoC 利用脚本 。 此仓库提供了针对 CVE-2025-68613 漏洞（影响 n8n 工作流自动化平台 ）的 扫描器与 PoC 利用脚本 。 警告 / 注意 中文 此工具 仅 用于 合法且已获授权 的安全测试。 禁止在未经所有者许可的情况下将此工具用于任何系统。 English This tool is ONLY for authorized and legal security testing...

CVE-2026-55251: Improper Control of Generation of Code

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...

CVE-2026-103249: Improper Neutralization of Input During Web Page Generation

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...