CVE-2026-103261

The Tornado web framework versions prior to 6.5.9 are vulnerable to a Denial of Service (DoS) condition. The root cause is a lack of limits on the number of query string fields processed within the HTTPServerRequest.__init__ component. A remote, unauthenticated attacker can exploit this by sendin...

CVE-2026-103260

The n8n workflow automation tool (versions before 2.39.6 and 2.40.x before 2.40.1 ) is vulnerable to an approval bypass in the Send and Wait node's Approve Within Chat mode. The root cause is a lack of verification regarding the identity or approval permissions of the requester. Consequently, una...

CVE-2026-103258

The n8n workflow automation tool (versions before 2.39.6 and 2.40.x before 2.40.1 ) is vulnerable to a filter bypass due to unescaped parameter interpolation in the SendGrid , Freshservice , and ServiceNow nodes. By binding vulnerable node parameters to untrusted external input, an attacker can b...

CVE-2026-103259

The n8n application versions before 2.39.6 and 2.40.x before 2.40.1 are vulnerable to a session token leakage in the Dynamic Credentials authorize and revoke endpoints. Attackers who possess resolver registration capability can capture collaborators' session tokens by configuring a fallback resol...

CVE-2026-103257

The automation platform n8n is vulnerable to a path traversal vulnerability in versions prior to 1.123.80, 2.39.6, and 2.40.1. The root cause is a failure to validate resource identifiers within the n8n node. An attacker can craft malicious resource IDs to redirect API calls to unintended targets...

CVE-2026-103255

Versions of n8n prior to 1.123.80, and from 2.0.0 before 2.39.6 and from 2.40.0 before 2.40.1, are vulnerable to a path traversal and query injection flaw in the Supabase node . The root cause is the lack of validation when the tableId parameter is inserted into request paths. Attackers can explo...

CVE-2026-103256

The n8n automation tool (versions before 2.39.6 and 2.40.x before 2.40.1 ) is vulnerable to a credentials leak via a preAuthentication Hook. The flaw resides in the Wekan and Baserow username-and-password credential types, where the application fails to properly validate host fields. Attackers wi...

CVE-2026-103254

The software n8n is vulnerable to a path traversal vulnerability in its signed resume URL generation for Send-and-Wait approvals . Affected versions include those before 1.123.80 , 2.0.0 before 2.39.6 , and 2.40.0 before 2.40.1 . An attacker with workflow creation permissions can exploit unresolv...

CVE-2026-103253

The n8n automation tool (versions before 1.123.80, 2.0.0 to 2.39.6, and 2.40.0 to 2.40.1) is vulnerable to an SQL injection flaw in the Oracle Database node 's Delete Table Drop operation. The root cause allows attackers to inject single quotes into table or schema fields to append arbitrary SQL ...

CVE-2026-103252

Versions of n8n prior to 1.123.80, 2.39.6, and 2.40.1 are vulnerable to an authorization bypass in the credential test endpoint . The root cause is the resolution of project-scoped variables without validating caller access. An attacker can provide an arbitrary project ID in the request body to i...

CVE-2026-103251

The software n8n versions before 1.123.80 , 2.39.6 , and 2.40.1 contains a validation bypass vulnerability in the community package installation handler specifically for queue mode deployments . An attacker with Redis write access can bypass name validation, permission checks, checksum verificati...

CVE-2026-103250

The automation platform n8n versions before 1.123.80, 2.39.6, and 2.40.1 is vulnerable to a NoSQL injection within the MongoDB Chat Memory node. The root cause is a failure to validate the sessionId parameter, allowing unauthenticated attackers to inject MongoDB query operators. This vulnerabilit...

CVE-2026-103248

The n8n workflow automation tool is vulnerable to a filter injection vulnerability in the Supabase node 's Filters (String) mode. The flaw exists because the application fails to escape field values, allowing attackers to inject filter expressions from untrusted input. Impacted versions include t...

CVE-2026-103249

The n8n workflow automation tool is vulnerable to a stored DOM cross-site scripting (XSS) vulnerability in versions before 1.123.80 , 2.39.6 , and 2.40.1 . The root cause lies in the handling of the Resource Locator parameter dropdown link. Malicious workflow authors can inject script URLs that e...

CVE-2026-103247

Versions of n8n before 1.123.80 are vulnerable to a credential tampering flaw caused by duplicate node IDs . Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to bypass the workflow credential tamper guard. This allows the attacker to retain victim ...

CVE-2026-103246

The n8n workflow automation tool is vulnerable to Credential Disclosure in versions prior to 2.39.6 and 2.40.x before 2.40.1 . The root cause is a failure to validate credential ownership during inline agent node-tool introspection . An attacker can reference arbitrary credential IDs to decrypt a...

CVE-2026-103245

Versions of n8n prior to 1.123.80, 2.39.6, and 2.40.1 are vulnerable to a missing webhook signature verification flaw in the Webflow Trigger node webhook handler. The application fails to verify the x-webflow-signature HMAC, allowing unauthenticated attackers to send forged webhook requests with ...

CVE-2026-103244

The ground-station application, in versions prior to 0.8.0 , is vulnerable to an authentication bypass within the setup.restore command. This flaw allows unauthenticated attackers to execute arbitrary SQL during the initial first-run setup mode. By invoking setup.restore via Socket.IO , an attack...

CVE-2026-103082

The LA-Studio Element Kit for Elementor WordPress plugin (versions

CVE-2026-4418

IBM Cloud Pak System is vulnerable to HTML injection (CWE-80) in versions 2.3.6.0 and 2.3.6.1 . A remotely authenticated attacker could inject malicious HTML code that executes in a victim's web browser within the security context of the hosting site. IBM addresses this vulnerability in Cloud Pak...