N8N-Io N8N vulnerabilities

CVE-2025-68613 [HIGH] CWE-913 CVE-2025-68613: n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.12 n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated i

CVE-2026-21858 [CRITICAL] CWE-20 CVE-2026-21858: n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the

CVE-2026-21877 [CRITICAL] CWE-94 CVE-2026-21877: n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instances. This issue is fixed in version 1.121.3. Administrators can reduce exposure by disabling

CVE-2025-68668 [CRITICAL] CWE-693 CVE-2025-68668: n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox by n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same priv

CVE-2026-27495 [CRITICAL] CWE-94 CVE-2026-27495: n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could exploit a vulnerability in the JavaScript Task Runner sandbox to execute arbitrary code outside the sandbox boundary. On instances using internal Task Runners (default runner mo

CVE-2026-27493 [CRITICAL] CWE-94 CVE-2026-27493: n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form data. When chained with an expression sandbox escape

CVE-2026-25053 [CRITICAL] CWE-78 CVE-2026-25053: n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabil n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or read arbitrary files on the n8n host. This issue has been patched in versions 1.123.10 and 2.5.0.

CVE-2026-27494 [CRITICAL] CWE-497 CVE-2026-27494: n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the Python Code node to escape the sandbox. The sandbox did not sufficiently restrict access to certain built-in Python objects, allowing an attacker to exfiltrate file con

CVE-2026-25052 [CRITICAL] CWE-367 CVE-2026-25052: n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerab n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n host system. This can be exploited to obtain critical configuration data and user credentials, leading to

CVE-2026-25049 [CRITICAL] CWE-913 CVE-2026-25049: n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authent n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n. This issue has been patched in versions 1.123.17 and 2.5.2.

CVE-2026-54309 [CRITICAL] CWE-306 CVE-2026-54309: n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browse n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint accepts session initialization and tool invocation requests without any authentication. Any network-reachable client, or any website visited by the user, can establish an MCP session and invoke brows

CVE-2026-27498 [HIGH] CWE-94 CVE-2026-27498: n8n is an open source workflow automation platform. Prior to versions 2.2.0 and 1.123.8, an authenti n8n is an open source workflow automation platform. Prior to versions 2.2.0 and 1.123.8, an authenticated user with permission to create or modify workflows could chain the Read/Write Files from Disk node with git operations to achieve remote code execution. By writing to specific configuration files and then triggering a git operation, the attacker co

CVE-2026-42231 [HIGH] CWE-1321 CVE-2026-42231: n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the xml2js library used to parse XML request bodies in n8n's webhook handler allowed prototype pollution via a crafted XML payload. An authenticated user with permission to create or modify workflows could exploit this to pollute the JavaScrip

CVE-2026-54310 [CRITICAL] CWE-89 CVE-2026-54310: n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated use n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameters to the TimescaleDB and/or legacy Postgres v1 node's allowing arbitrary SQL to be injected and executed against the connected database within the privileges of the confi

CVE-2026-25115 [CRITICAL] CWE-693 CVE-2026-25115: n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the P n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. This issue has been patched in version 2.4.8.

CVE-2026-54305 [CRITICAL] CWE-200 CVE-2026-54305: n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without performing per-resource ownership or scope checks on the target workflow or credential. An authenticated user with no project membership or credential sh

CVE-2026-27497 [HIGH] CWE-89 CVE-2026-27497: n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could leverage the Merge node's SQL query mode to execute arbitrary code and write arbitrary files on the n8n server. The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.2

CVE-2026-85169 [HIGH] CWE-94 CVE-2026-85169: n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototype reference. An attacker with workflow-build privilege ca

CVE-2026-72767 [HIGH] CWE-78 CVE-2026-72767: n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vul n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks under default git security settings, executing arbitrary commands as the n8n process user. Both

CVE-2026-25056 [HIGH] CWE-434 CVE-2026-25056: n8n is an open source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, a vulnerabi n8n is an open source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, a vulnerability in the Merge node's SQL Query mode allowed authenticated users with permission to create or modify workflows to write arbitrary files to the n8n server's filesystem potentially leading to remote code execution. This issue has been patched in versio