Vulnerabilities

TI-2026-65635 CVE-2026-103260 · GHSA-v8hf-6rg3-94j4

n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node

LOW 28

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00281 Published 2026-10-01 Fixed in 2.39.6, 2.40.1 CWE-862

TI-2026-65634 CVE-2026-103259 · GHSA-qrhv-fqjc-jcmq

n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials

LOW 38

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credentials authorize and revoke endpoints.

CVSS 4.0HIGH 8.5 Network High privileges User interaction EPSS 0.00239 Published 2026-10-01 Fixed in 2.39.6, 2.40.1 CWE-863

TI-2026-65633 CVE-2026-103258 · GHSA-fr2j-m9j7-53r7

n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation

LOW 30

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an unescaped parameter interpolation vulnerability in SendGrid, Freshservice, and ServiceNow nodes that allows attackers to bypass filters by breaking out of qu…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00302 Published 2026-10-01 Fixed in 2.39.6, 2.40.1 CWE-943

TI-2026-65631 CVE-2026-103256 · GHSA-6m32-557f-fqq9

n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook

LOW 31

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that sends unencrypted passwords to unvalidated hosts.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00211 Published 2026-10-01 Fixed in 2.39.6, 2.40.1 CWE-522

TI-2026-65621 CVE-2026-103246 · GHSA-6w8v-v5w3-7x56

n8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool Introspection

LOW 36

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 fail to validate credential ownership during inline agent node-tool introspection.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00258 Published 2026-10-01 Fixed in 2.39.6, 2.40.1 CWE-639