n8n

Records234All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical25CVSS 9.0–10.0

CVSS high104CVSS 7.0–8.9

Exploited now

n8n records in CISA KEV

TI-2025-42131 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability CRITICAL 100KEV 2026-03-11

Components

Products in the NVD configurations · select one to filter the records

N8n 179 records CRITICAL

Records

179 records in N8n · all components

TI-2025-42131 CVE-2025-68613 · GHSA-v98v-ff95-f3cp

n8n Vulnerable to Remote Code Execution via Expression Injection

CRITICAL 100KEV

n8n is an open source workflow automation platform.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.98994 Published 2025-12-19 Fixed in 1.120.4, 1.121.1 CWE-913

TI-2026-17560 CVE-2026-21858 · GHSA-v4pr-fm98-w9pg

n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling

CRITICAL 88

n8n is an open source workflow automation platform.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.78188 Published 2026-01-07 Fixed in 1.121.0 CWE-20

TI-2026-01167 CVE-2026-1470 · GHSA-5xrp-6693-jjx9

Authenticated users can bypass the Expression sandbox mechanism to achieve full remote…

HIGH 76

n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.20401 Published 2026-01-27 Fixed in 1.123.17, 2.4.5 +1 CWE-95

TI-2026-00644 CVE-2026-0863 · GHSA-j6wg-29xj-2fjf

Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.

HIGH 76

Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.09288 Published 2026-01-18 Fixed in 2.4.2, 1.123.14 +1 CWE-95

TI-2025-35293 CVE-2025-56265 · GHSA-v2x8-97xq-8xrr

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3…

HIGH 73

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00611 Published 2025-09-08 Fixed in 1.107.0 CWE-434

TI-2023-12275 CVE-2023-27563 · GHSA-97cp-mr4m-9mcf

The n8n package 0.218.0 for Node.js allows Escalation of Privileges.

HIGH 73

The n8n package 0.218.0 for Node.js allows Escalation of Privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01222 Published 2023-05-10 Fixed in 0.216.1

TI-2023-12276 CVE-2023-27564 · GHSA-r9xw-p7wj-w792

The n8n package 0.218.0 for Node.js allows Information Disclosure.

HIGH 72

The n8n package 0.218.0 for Node.js allows Information Disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01224 Published 2023-05-10 Fixed in 0.216.1 CWE-668

TI-2023-12274 CVE-2023-27562 · GHSA-p58x-7733-vp9m

The n8n package 0.218.0 for Node.js allows Directory Traversal.

MEDIUM 62

The n8n package 0.218.0 for Node.js allows Directory Traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02316 Published 2023-05-10 Fixed in 0.216.1 CWE-22

TI-2025-42161 CVE-2025-68668 · GHSA-62r4-hw23-cc8v

n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node

MEDIUM 57

n8n is an open source workflow automation platform.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.13167 Published 2025-12-26 Fixed in 2.0.0 CWE-693

TI-2026-21969 CVE-2026-27577 · GHSA-vpcf-gvg4-6qwr

n8n: Expression Sandbox Escape Leads to RCE

MEDIUM 55

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.10725 Published 2026-02-25 Fixed in 1.123.22, 2.9.3 +1 CWE-94

TI-2026-17578 CVE-2026-21877 · GHSA-v364-rw7m-3263

n8n is vulnerable to Remote Code Execution via Arbitrary File Write

MEDIUM 51

n8n is an open source workflow automation platform.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.05449 Published 2026-01-08 Fixed in 1.121.3 CWE-434

TI-2026-30552 CVE-2026-42231 · GHSA-q5f4-99jv-pgg5

n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE

MEDIUM 50

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00851 Published 2026-05-04 Fixed in 1.123.32, 2.17.4 +1 CWE-1321

TI-2026-26040 CVE-2026-33660 · GHSA-58qr-rcgv-642v

n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode

MEDIUM 50

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00968 Published 2026-03-25 Fixed in 1.123.27, 2.13.3 +1 CWE-94

TI-2026-32673 CVE-2026-44789 · GHSA-c8xv-5998-g76h

n8n: HTTP Request Node Pagination Prototype Pollution to RCE

MEDIUM 49

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00529 Published 2026-06-23 Fixed in 1.123.43, 2.20.7 +2 CWE-1321

TI-2026-21900 CVE-2026-27493 · GHSA-75g8-rv7v-32f7

n8n has Unauthenticated Expression Evaluation via Form Node

MEDIUM 46

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.01386 Published 2026-02-25 Fixed in 1.123.22, 2.9.3 +1 CWE-94

TI-2026-20233 CVE-2026-25049 · GHSA-6cqr-8cfr-67f8

n8n Has an Expression Escape Vulnerability Leading to RCE

MEDIUM 46

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01563 Published 2026-02-04 Fixed in 1.123.17, 2.5.2 CWE-913

TI-2026-17593 CVE-2026-21893 · GHSA-7c4h-vh2m-743m

n8n Vulnerable to Command Injection in Community Package Installation

MEDIUM 46

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01539 Published 2026-02-04 Fixed in 1.120.3 CWE-20

TI-2026-58880 CVE-2026-86075 · GHSA-hh89-3r9w-qj3j

n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint

MEDIUM 45

n8n is an open source workflow automation platform.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00609 Published 2026-09-08 Fixed in 2.37.7, 2.38.2 CWE-770

TI-2026-39205 CVE-2026-54309 · GHSA-qrx8-25qr-5r7v

n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

MEDIUM 45

n8n is an open source workflow automation platform.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00546 Published 2026-06-23 Fixed in 2.26.2, 2.25.7 CWE-306

TI-2026-30557 CVE-2026-42236 · GHSA-49m9-pgww-9vq6

n8n: Unauthenticated Denial of Service via MCP Client Registration

MEDIUM 44

n8n is an open source workflow automation platform.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00487 Published 2026-05-04 Fixed in 1.123.32, 2.17.4 +1 CWE-770

TI-2026-26075 CVE-2026-33696 · GHSA-mxrg-77hm-89hv

n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE

MEDIUM 44

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00803 Published 2026-03-25 Fixed in 1.123.27, 2.13.3 +1 CWE-1321

TI-2026-21904 CVE-2026-27497 · GHSA-wxx7-mcgf-j869

n8n has Potential Remote Code Execution via Merge Node

MEDIUM 44

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00878 Published 2026-02-25 Fixed in 1.123.22, 2.9.3 +1 CWE-89

TI-2026-21902 CVE-2026-27495 · GHSA-jjpj-p2wh-qf23

n8n has a Sandbox Escape in its JavaScript Task Runner

MEDIUM 44

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00794 Published 2026-02-25 Fixed in 1.123.22, 2.9.3 +1 CWE-94

TI-2026-20240 CVE-2026-25056 · GHSA-hv53-3329-vmrm

n8n Arbitrary File Write leading to RCE in n8n Merge Node

MEDIUM 44

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00728 Published 2026-02-04 Fixed in 1.118.0, 2.4.0 CWE-434

TI-2025-40532 CVE-2025-65964 · GHSA-wpqc-h9wp-chmq

n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook

MEDIUM 44

n8n is an open source workflow automation platform.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00663 Published 2025-12-08 Fixed in 1.119.2 CWE-829

Open these records in search →