Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

17 records

Release: n8n-io n8n, n8n 2.33.4, 2.34.1 Clear all filters
TI-2026-53838 CVE-2026-77085 · GHSA-gvf5-4g66-f766

n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool

Priority LOW 28

n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00361 Published 2026-08-20 Fixed in 2.34.1, 2.33.4 CWE-918
TI-2026-53835 CVE-2026-77082 · GHSA-jxf5-f3hg-vxvj

n8n before 1.123.69 ReDoS via Filter and Switch Node

Priority LOW 24

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service (ReDoS) vulnerability in the Filter and Switch nodes, which compile user-supplied regex patterns with new R…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00472 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-1333
TI-2026-53834 CVE-2026-77081 · GHSA-jrhf-3pw6-qqwv

n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node

Priority LOW 23

n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node.

CVSS 4.0MEDIUM 5.1 Network Low privileges No interaction EPSS 0.00378 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-639
TI-2026-53833 CVE-2026-77080 · GHSA-f4h2-4c4x-g885

n8n before 1.123.69 Arbitrary File Read and Write via Snowflake

Priority MEDIUM 40

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read and write vulnerability in the Snowflake node, which passes free-form Execute Query input, including client-side commands, d…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00568 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-78
TI-2026-53832 CVE-2026-77079 · GHSA-49q9-j3mm-wgh5

n8n before 2.34.1 Authorization Bypass via Custom Role Deletion

Priority LOW 39

n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion (reassignment) path.

CVSS 4.0HIGH 7.4 Network Low privileges No interaction EPSS 0.00451 Published 2026-08-20 Fixed in 2.34.1, 2.33.4 CWE-639
TI-2026-53829 CVE-2026-77076 · GHSA-8329-w544-9mx3

n8n before 1.123.69 Credential Leak via GraphQL Node Error

Priority LOW 32

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00492 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-209
TI-2026-53828 CVE-2026-77075 · GHSA-vp98-5689-mc9f

n8n before 1.123.69 Expression Injection via Resource Locator

Priority LOW 37

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering.

CVSS 4.0HIGH 8.4 Network Low privileges User interaction EPSS 0.0046 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-94
TI-2026-53827 CVE-2026-77074 · GHSA-h3rw-rg69-fppw

n8n before 1.123.69 SSRF via Edit Image Node

Priority LOW 27

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00361 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-94
TI-2026-53826 CVE-2026-77073 · GHSA-hf5p-745p-2j3h

n8n before 2.34.1 Cross-Project Credential Access via MCP

Priority LOW 32

n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00345 Published 2026-08-20 Fixed in 2.34.1, 2.33.4 CWE-639
TI-2026-53825 CVE-2026-77072 · GHSA-47gc-w5fv-qr5m

n8n before 1.123.69 Stored XSS via Form Completion Page

Priority LOW 38

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completion page.

CVSS 4.0HIGH 8.4 Network Low privileges User interaction EPSS 0.00306 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-79
TI-2026-53824 CVE-2026-77071 · GHSA-7vgw-vx83-cq44

n8n before 1.123.69 PostgREST Filter Injection via Supabase

Priority LOW 32

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Many, Delete, and Update operations, which built filter queries by concatenating an expression-bi…

CVSS 4.0HIGH 7.1 Network No auth No interaction EPSS 0.00615 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-89
TI-2026-53823 CVE-2026-77070 · GHSA-4x9q-xqfh-jh4j

n8n before 1.123.69 NoSQL Injection via MongoDB Node

Priority LOW 32

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without s…

CVSS 4.0HIGH 7.1 Network No auth No interaction EPSS 0.00511 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-943
TI-2026-53822 CVE-2026-77069 · GHSA-4x7w-pwq5-598q

n8n before 1.123.69 SSRF Protection Bypass via OAuth2

Priority LOW 12

n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-to-access-token exchange.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00293 Published 2026-08-20 Fixed in 1.123.69, 2.34.1 +1 CWE-918
TI-2026-53821 CVE-2026-77068 · GHSA-h5rm-9fhh-5phj

n8n before 2.34.1 Remote Code Execution via Path Traversal

Priority MEDIUM 41

n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0093 Published 2026-08-20 Fixed in 2.34.1, 2.33.4 CWE-22