n8n has a Guardrail Node Bypass
Key facts
- Attack vector
- —
- Privileges required
- —
- User interaction
- —
- Attack complexity
- —
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- —
- Fix status
- Fixed
No CVSS vector from any source. Fix status from GitHub. Impact type from CWE-693.
Summary
## Impact An end user interacting with a workflow that uses the Guardrail node could craft an input that bypasses the default guardrail instructions. ## Patches The issue has been fixed in n8n version 2.10.0. Users should upgrade to this version or later to remediate the vulnerability. ## Workarounds If upgrading is not immediately possible, administrators should consider the following temporary mitigations: - Limit access to trusted users. - Review asses the practical impact of guardrail bypasses in your usecase and adjust your workflow accordingly. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | n8n (npm) | before 2.10.0 | 2.10.0 | Patch available | GHSA-fvfv-ppw4-7h2w |
- n8n (npm) Vendor— Affected before 2.10.0 Fixed in 2.10.0 Patch available GHSA-fvfv-ppw4-7h2w
Remediation
- Fix · GHSA-fvfv-ppw4-7h2w n8n (npm) Fixed in 2.10.0 Advisory →
Timeline
- 2026-10-03 Threatist record created from GHSA-fvfv-ppw4-7h2w
References
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences