n8n vulnerabilities and CVEs
The Beam CVE database tracks 156 security advisories for n8n: 24 critical, 58 high and 74 medium severity. 1 is known to be exploited (CISA KEV). The newest is CVE-2026-86073, published Sep 10, 2026 and fixed in 2.38.1, 2.37.7.
A workflow automation platform with AI agent nodes. Self-hosted instances often hold credentials for many connected services.
Check your version: npm ls n8n or npm ls n8n-nodes-base
- Vulnerabilities tracked
- 156
- Critical
- 24
- Known exploited (CISA KEV)
- 1
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-86073
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
medium5.9Sep 10, 2026CVE-2026-86074
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
medium5.9Sep 10, 2026CVE-2026-86075
n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
high8.7Sep 10, 2026CVE-2026-86076
n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution
high8.7Sep 10, 2026CVE-2026-86077
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
medium6.3Sep 10, 2026CVE-2026-86078
n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
medium6.0Sep 10, 2026CVE-2026-86079
n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
medium6.3Sep 10, 2026CVE-2026-86080
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
medium6.3Sep 10, 2026CVE-2026-86081
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
high7.1Sep 10, 2026CVE-2026-86082
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
high7.1Sep 10, 2026CVE-2026-86083
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution
high7.7Sep 10, 2026CVE-2026-86084
n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
medium6.0Sep 10, 2026CVE-2026-86085
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
medium5.1Sep 10, 2026CVE-2026-86993
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
medium5.9Sep 10, 2026CVE-2026-86994
n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
medium5.3Sep 10, 2026CVE-2026-86995
n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
medium5.3Sep 10, 2026CVE-2026-86996
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
medium5.3Sep 8, 2026CVE-2026-58661
n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads
medium5.3Jul 22, 2026CVE-2026-59206
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration
high7.1Jul 22, 2026CVE-2026-59207
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
high7.1Jul 22, 2026CVE-2026-59208
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
high7.6Jul 22, 2026CVE-2026-59209
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
high7.1Jul 22, 2026CVE-2026-59253
n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects
medium5.3Jul 22, 2026CVE-2026-59254
n8n: External Secrets Accessible via Workflow Expressions Outside Credentials
medium6.3Jul 22, 2026CVE-2026-59257
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
medium5.3Jul 22, 2026CVE-2026-59259
n8n: External Secrets Permission Bypass via Expression Parser Mismatch
medium6.0Jul 22, 2026CVE-2026-65014
n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook
medium6.3Jul 22, 2026CVE-2026-65015
n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
high7.2Jul 22, 2026CVE-2026-65016
n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner
high7.7Jul 22, 2026CVE-2026-65589
n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
medium5.1Jul 22, 2026CVE-2026-65590
n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows
medium5.5Jul 22, 2026CVE-2026-65591
n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution
high8.9Jul 22, 2026CVE-2026-65592
n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`
high8.4Jul 22, 2026CVE-2026-65593
n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access
medium6.3Jul 22, 2026CVE-2026-65594
n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check
medium5.1Jul 22, 2026CVE-2026-65595
n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
high8.9Jul 22, 2026CVE-2026-65596
n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction
medium5.1Jul 22, 2026CVE-2026-65597
n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview
high8.2Jul 22, 2026CVE-2026-65598
n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
high8.9Jul 22, 2026CVE-2026-65599
n8n: Google Service Account Private Key Exposed in JWT Header
medium5.1Jul 22, 2026GHSA-2x35-3fw4-9jr4
n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion
high8.2Jul 22, 2026GHSA-64xh-79j6-r5v8
n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes
high7.1Jul 22, 2026GHSA-652q-gvq3-74qv
n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
medium5.3Jul 22, 2026GHSA-6qc9-mqvw-jg7x
n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`
high7.1Jul 22, 2026GHSA-8342-988q-86cr
n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login
high8.9Jul 22, 2026GHSA-9cmh-xcqm-5hqr
n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner
medium5.8Jul 22, 2026GHSA-cj9h-qx8g-pq2g
n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON
high7.2Jul 22, 2026GHSA-gf29-4f56-r2jf
n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction
high7.1Jul 22, 2026GHSA-gv7g-jm28-cr3m
n8n: Expression sandbox escape via arrow-function bodies enabling command execution
high8.7Jul 22, 2026GHSA-hx4h-vr3m-45vh
n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service
medium6.1Jul 22, 2026GHSA-jqwr-vx3p-r266
n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances
medium5.8Jul 22, 2026GHSA-pf2q-pxhf-hgmw
n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory
medium4.9Jul 22, 2026GHSA-rcv6-pvrj-4xcg
n8n: Authenticated code execution in the n8n Git node
high8.7Jul 22, 2026GHSA-vhf8-cg2h-cg3p
n8n: SSRF Protection Bypass via MCP Client Node
medium6.4Jul 22, 2026GHSA-xmc9-4f2h-jf9c
n8n: Edit Image Node Format Injection Allows Arbitrary File Write
high7.7Jul 22, 2026GHSA-xwx6-jjhv-84p8
n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service
high7.1Jul 22, 2026GHSA-664h-gpgq-h6xx
n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints
medium5.4Jun 17, 2026CVE-2026-49444
n8n: Python sandbox escape
high8.5Jun 16, 2026CVE-2026-49465
n8n: Git Node Clone and Push Operations Bypass File Sandbox
medium7.7Jun 16, 2026CVE-2026-54301
n8n: Same-Origin XSS in Respond to Webhook Node
high7.6Jun 16, 2026CVE-2026-54302
n8n: Stored XSS in Chat Trigger Node
high7.6Jun 16, 2026CVE-2026-54303
n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints
medium7.6Jun 16, 2026CVE-2026-54304
n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host
high7.7Jun 16, 2026CVE-2026-54305
n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
high9.9Jun 16, 2026CVE-2026-54306
n8n: Prototype Pollution enables confused-deputy execution via public webhooks
medium5.4Jun 16, 2026CVE-2026-54307
n8n: Credential Exfiltration via Permission Bypass
high9.6Jun 16, 2026CVE-2026-54308
n8n: Missing Token Validation on Microsoft Agent 365 Trigger and Stripe Nodes
medium7.2Jun 16, 2026CVE-2026-54309
n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
high10.0Jun 16, 2026CVE-2026-54310
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
medium9.9Jun 16, 2026CVE-2026-54311
n8n: Merge Node SQL Mode Prototype Pollution
medium6.3Jun 16, 2026CVE-2026-54312
n8n: Microsoft SQL Node Prototype Pollution
high8.5Jun 16, 2026CVE-2026-54313
n8n: NoSQL Injection in MongoDB Node Find And Replace Operation
medium7.7Jun 16, 2026CVE-2026-54314
n8n: Denial of Service via ZIP decompression in webhook workflow
medium5.9Jun 16, 2026GHSA-h3jj-5f3v-3685
n8n: Public API Execution Retry Authorization Bypass
medium6.4Jun 16, 2026GHSA-hv7x-3x78-gx53
n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint
medium7.4Jun 16, 2026GHSA-jwm3-qcfw-c5pp
n8n: Python Code Node AST Validator Bypass
medium5.0Jun 16, 2026CVE-2026-56348
n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass
medium9.1May 19, 2026GHSA-2vx9-7wpg-88jq
n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions
medium6.4May 19, 2026CVE-2026-44789
n8n: HTTP Request Node Pagination Prototype Pollution to RCE
critical9.9May 14, 2026CVE-2026-44790
n8n Has an Arbitrary File Read via Git Node
critical8.8May 14, 2026CVE-2026-44791
n8n Has an XML Node Prototype Pollution Patch Bypass
critical9.9May 14, 2026CVE-2026-44792
n8n Has a Source Control Pull SQL Injection
high9.0May 14, 2026CVE-2026-45732
n8n Has a Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints
high8.1May 14, 2026CVE-2026-42226
n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay
high8.5Apr 29, 2026CVE-2026-42227
n8n has Public API Variables IDOR that Allows Cross-Project Secret Disclosure
medium7.7Apr 29, 2026CVE-2026-42228
n8n Vulnerable to Hijacking of Unauthenticated Chat Execution
medium5.4Apr 29, 2026CVE-2026-42229
n8n has SQL Injection in SeaTable Node
medium6.8Apr 29, 2026CVE-2026-42230
n8n has Open Redirect in MCP OAuth Consent Flow
medium4.7Apr 29, 2026CVE-2026-42231
n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE
critical10.0Apr 29, 2026CVE-2026-42232
n8n has XML Node Prototype Pollution that to RCE
critical9.9Apr 29, 2026CVE-2026-42233
n8n has SQL Injection in Oracle Database Node via Limit Field
medium9.8Apr 29, 2026CVE-2026-42234
n8n has a Python Task Runner Sandbox Escape Vulnerability
high7.5Apr 29, 2026CVE-2026-42235
n8n Vulnerable to XSS via MCP OAuth client
high8.2Apr 29, 2026CVE-2026-42236
n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration
high7.5Apr 29, 2026CVE-2026-42237
n8n has SQL Injection in Snowflake and MySQL Nodes
medium8.2Apr 29, 2026CVE-2026-56358
n8n has a Stored XSS Vulnerability in its Form Trigger
medium5.4Mar 27, 2026GHSA-364x-8g5j-x2pr
n8n has XSS in its Credential Management Flow
medium5.4Mar 27, 2026GHSA-3c7f-5hgj-h279
n8n has XSS in Chat Trigger Node through Custom CSS
medium5.4Mar 27, 2026GHSA-w673-8fjw-457c
n8n: Authenticated XSS and Open Redirect via Form Node
medium4.1Mar 27, 2026CVE-2026-33696
n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE
critical9.9Mar 26, 2026CVE-2026-33713
n8n has SQL Injection in Data Table Node via orderByColumn Expression
high9.9Mar 26, 2026CVE-2026-33749
n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
medium8.9Mar 26, 2026CVE-2026-33751
n8n Vulnerable to LDAP Filter Injection in LDAP Node
medium4.8Mar 26, 2026CVE-2026-27496
n8n has In-Process Memory Disclosure in its Task Runner
high6.5Mar 25, 2026CVE-2026-33660
n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
critical9.9Mar 25, 2026CVE-2026-33663
n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
high9.9Mar 25, 2026CVE-2026-33665
n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover
high8.2Mar 25, 2026CVE-2026-33720
n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK
medium4.7Mar 25, 2026CVE-2026-33722
n8n Has External Secrets Authorization Bypass in Credential Saving
high6.3Mar 25, 2026CVE-2026-33724
n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no
medium5.4Mar 25, 2026CVE-2026-56351
n8n: SQL Injection in MySQL, PostgreSQL, and Microsoft SQL nodes
medium8.2Feb 26, 2026CVE-2026-56357
n8n: Webhook Forgery on Github Webhook Trigger
medium4.0Feb 26, 2026GHSA-38c7-23hj-2wgq
n8n has Webhook Forgery on Zendesk Trigger Node
medium4.0Feb 26, 2026GHSA-fvfv-ppw4-7h2w
n8n has a Guardrail Node Bypass
medium3.7Feb 26, 2026GHSA-jh8h-6c9q-7gmw
n8n has an Authentication Bypass in its Chat Trigger Node
medium4.8Feb 26, 2026GHSA-vjf3-2gpj-233v
n8n has an SSO Enforcement Bypass in its Self-Service Settings API
medium6.3Feb 26, 2026CVE-2026-27493
n8n has Unauthenticated Expression Evaluation via Form Node
critical9.0Feb 25, 2026CVE-2026-27494
n8n has Arbitrary File Read via Python Code Node Sandbox Escape
high9.9Feb 25, 2026CVE-2026-27495
n8n has a Sandbox Escape in its JavaScript Task Runner
critical9.4Feb 25, 2026CVE-2026-27497
n8n has Potential Remote Code Execution via Merge Node
critical9.9Feb 25, 2026CVE-2026-27498
n8n has Arbitrary Command Execution via File Write and Git Operations
critical8.5Feb 25, 2026CVE-2026-27577
n8n: Expression Sandbox Escape Leads to RCE
critical9.9Feb 25, 2026CVE-2026-27578
n8n Vulnerable to Stored XSS via Various Nodes
high5.4Feb 25, 2026CVE-2025-61917
n8n's Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner
high7.7Feb 4, 2026CVE-2026-21893
n8n Vulnerable to Command Injection in Community Package Installation
critical9.4Feb 4, 2026CVE-2026-25049
n8n Has Expression Escape Vulnerability Leading to RCE
critical9.4Feb 4, 2026CVE-2026-25051
n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS
high8.5Feb 4, 2026CVE-2026-25052
n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users
critical9.4Feb 4, 2026CVE-2026-25053
n8n has OS Command Injection in Git Node
critical9.4Feb 4, 2026CVE-2026-25054
n8n Has Stored Cross-site Scripting via Markdown Rendering in Workflow UI
high8.5Feb 4, 2026CVE-2026-25055
n8n Vulnerable to Arbitrary File Write on Remote Systems via SSH Node
high7.1Feb 4, 2026CVE-2026-25056
n8n Merge Node has Arbitrary File Write leading to RCE
critical9.4Feb 4, 2026CVE-2026-25115
n8n has a Python sandbox escape
critical9.9Feb 4, 2026CVE-2026-25631
n8n's domain allowlist bypass enables credential exfiltration
medium5.3Feb 4, 2026CVE-2026-1470
n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution
critical9.9Jan 27, 2026CVE-2025-68949
n8n: Webhook Node IP Whitelist Bypass via Partial String Matching
medium5.3Jan 13, 2026CVE-2026-21858
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
critical10.0Jan 7, 2026CVE-2026-21894
n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks
medium6.5Jan 7, 2026CVE-2026-21877
n8n Vulnerable to RCE via Arbitrary File Write
critical9.9Jan 6, 2026CVE-2025-61914
n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox
high7.3Dec 26, 2025CVE-2025-68668
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
critical9.9Dec 26, 2025CVE-2025-68697
Self-hosted n8n has Legacy Code node that enables arbitrary file read/write
high7.1Dec 26, 2025CVE-2025-68613
n8n Vulnerable to Remote Code Execution via Expression Injection
critical9.9ExploitedDec 22, 2025CVE-2025-65964
n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook
critical9.4Dec 8, 2025CVE-2025-62726
n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook
high8.8Oct 30, 2025GHSA-365g-vjw2-grx8
n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host
high8.8No fixOct 9, 2025CVE-2025-58177
Stored XSS in n8n LangChain Chat Trigger Node via initialMessages Parameter
medium4.1Sep 15, 2025CVE-2025-57749
n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted files
medium6.5Aug 20, 2025CVE-2025-52478
Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source
high8.7Aug 19, 2025CVE-2025-49595
n8n Vulnerable to Denial of Service via Malformed Binary Data Requests
medium4.9Jul 3, 2025CVE-2025-52554
n8n is vulnerable to Improper Authorization through its `/stop` endpoint
medium4.3Jul 3, 2025CVE-2025-49592
n8n allows open redirects via the /signin endpoint
medium4.6Jun 27, 2025CVE-2025-46343
n8n Vulnerable to Stored XSS through Attachments View Endpoint
medium5.0Apr 28, 2025CVE-2023-27562
n8n Directory Traversal vulnerability
medium6.5May 10, 2023CVE-2023-27563
n8n Privilege Escalation vulnerability
high8.8May 10, 2023CVE-2023-27564
n8n Information Disclosure vulnerability
high7.5May 10, 2023
Withdrawn advisories (18)
GHSA-38fj-36m5-783c
Duplicate Advisory: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access
medium6.3WithdrawnJul 22, 2026GHSA-5vfw-jc4p-fj39
Duplicate Advisory: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check
medium5.1WithdrawnJul 22, 2026GHSA-725q-c4vp-q4cg
Duplicate Advisory: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
high8.9WithdrawnJul 22, 2026GHSA-88c4-pcqm-3r9p
Duplicate Advisory: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction
medium5.1WithdrawnJul 22, 2026GHSA-fmvg-vhqq-r2mj
Duplicate Advisory: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
medium5.1WithdrawnJul 22, 2026GHSA-h5xr-fqvj-253p
Duplicate Advisory: Stored DOM XSS via Resource Locator `cachedResultUrl`
high8.4WithdrawnJul 22, 2026GHSA-h9fm-xcv2-qfw3
Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook
medium6.3WithdrawnJul 22, 2026GHSA-m7jc-p4hf-xhwq
Duplicate Advisory: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution
high8.9WithdrawnJul 22, 2026GHSA-mhvh-gwhr-76pw
Duplicate Advisory: Google Service Account Private Key Exposed in JWT Header
medium5.1WithdrawnJul 22, 2026GHSA-mwq7-vcmc-cm4q
Duplicate Advisory: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner
high7.7WithdrawnJul 22, 2026GHSA-vhcw-f978-xjjg
Duplicate Advisory: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview
high8.2WithdrawnJul 22, 2026GHSA-w46p-w7w2-fr9g
Duplicate Advisory: AI Agents Project Viewer Privilege Escalation via run_node_tool
high7.2WithdrawnJul 22, 2026GHSA-wq64-hcrf-8m56
Duplicate Advisory: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
high8.9WithdrawnJul 22, 2026GHSA-3j7v-fhjg-6rh2
Duplicate Advisory: n8n: External Secrets Accessible via Workflow Expressions Outside Credentials
medium6.3WithdrawnJul 15, 2026GHSA-q6mx-qvhp-fqmg
Duplicate Advisory: External Secrets Permission Bypass via Expression Parser Mismatch
medium6.5WithdrawnJul 15, 2026GHSA-2vww-6p9h-5g8j
Duplicate Advisory: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads
medium4.3WithdrawnJul 10, 2026GHSA-2qp2-6frj-p9pq
Duplicate Advisory: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
medium8.8WithdrawnJul 8, 2026GHSA-gqcv-rfj6-r29g
Duplicate Advisory: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects
medium5.0WithdrawnJul 8, 2026