Behoben in
CVEs, die 2.2 betreffen
| CVE | Titel | CVSS | Ausgenutzt | EPSS | Veröffentlicht |
|---|---|---|---|---|---|
| CVE-2026-1470 | Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s... | 9.9 | — | 2026-01-27 | |
| CVE-2026-0863 | Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host. | 9.9 | — | 2026-01-18 | |
| CVE-2026-27493 | n8n has Unauthenticated Expression Evaluation via Form Node | 9.5 | — | 2026-02-25 | |
| CVE-2026-25056 | n8n Arbitrary File Write leading to RCE in n8n Merge Node | 9.4 | — | 2026-02-04 | |
| CVE-2026-44791 | n8n: XML Node Prototype Pollution Patch Bypass | 9.4 | — | 2026-06-23 | |
| CVE-2026-27577 | n8n: Expression Sandbox Escape Leads to RCE | 9.4 | — | 2026-02-25 | |
| CVE-2026-25049 | n8n Has an Expression Escape Vulnerability Leading to RCE | 9.4 | — | 2026-02-04 | |
| CVE-2026-27495 | n8n has a Sandbox Escape in its JavaScript Task Runner | 9.4 | — | 2026-02-25 | |
| CVE-2026-25115 | n8n is vulnerable to Python sandbox escape | 9.4 | — | 2026-02-04 | |
| CVE-2026-27497 | n8n has Potential Remote Code Execution via Merge Node | 9.4 | — | 2026-02-25 | |
| CVE-2026-33696 | n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE | 9.4 | — | 2026-03-25 | |
| CVE-2026-33660 | n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode | 9.4 | — | 2026-03-25 | |
| CVE-2026-25052 | n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users | 9.4 | — | 2026-02-04 | |
| CVE-2026-25053 | n8n is Vulnerable to OS Command Injection in Git Node | 9.4 | — | 2026-02-04 | |
| CVE-2026-44789 | n8n: HTTP Request Node Pagination Prototype Pollution to RCE | 9.4 | — | 2026-06-23 | |
| CVE-2026-44790 | n8n: Arbitrary File Read via Git Node | 9.4 | — | 2026-06-23 | |
| CVE-2026-65595 | n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange | 8.9 | — | 2026-07-22 | |
| CVE-2026-72772 | n8n before 2.32.1 Authentication Bypass via Token Exchange | 8.9 | — | 2026-08-11 | |
| CVE-2026-44792 | n8n: Source Control Pull SQL Injection | 8.9 | — | 2026-06-23 | |
| CVE-2026-54305 | n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints | 8.9 | — | 2026-06-23 | |
| CVE-2026-65598 | n8n before 1.123.64 Remote Code Execution via Git Clone | 8.9 | — | 2026-07-22 | |
| CVE-2026-71539 | n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution | 8.9 | — | 2026-08-18 | |
| CVE-2026-65591 | n8n before 1.123.64 Sanitizer Bypass Remote Code Execution | 8.9 | — | 2026-07-22 | |
| CVE-2026-33665 | n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover | 8.8 | — | 2026-03-25 | |
| CVE-2026-54309 | n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions | 8.8 | — | 2026-06-23 | |
| CVE-2026-33713 | n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression | 8.7 | — | 2026-03-25 | |
| CVE-2026-77068 | n8n before 2.34.1 Remote Code Execution via Path Traversal | 8.7 | — | 2026-08-20 | |
| CVE-2026-86076 | n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution | 8.7 | — | 2026-09-08 | |
| CVE-2026-77080 | n8n before 1.123.69 Arbitrary File Read and Write via Snowflake | 8.7 | — | 2026-08-20 | |
| CVE-2026-85169 | n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak | 8.7 | — | 2026-09-03 | |
| CVE-2026-42236 | n8n: Unauthenticated Denial of Service via MCP Client Registration | 8.7 | — | 2026-05-04 | |
| CVE-2026-72767 | n8n before 1.123.67 Remote Code Execution via Git node | 8.7 | — | 2026-08-11 | |
| CVE-2026-119408 | n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes | 8.7 | — | 2026-10-30 | |
| CVE-2026-118649 | n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables | 8.7 | — | 2026-10-29 | |
| CVE-2026-86075 | n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint | 8.7 | — | 2026-09-08 | |
| CVE-2026-72765 | n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape | 8.7 | — | 2026-08-11 | |
| CVE-2026-33663 | n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Editio... | 8.5 | — | 2026-03-25 | |
| CVE-2026-27578 | n8n Vulnerable to Stored XSS via Various Nodes | 8.5 | — | 2026-02-25 | |
| CVE-2026-25054 | n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI | 8.5 | — | 2026-02-04 | |
| CVE-2026-54307 | n8n: Credential Exfiltration via Permission Bypass | 8.5 | — | 2026-06-23 | |
| CVE-2026-103259 | n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials | 8.5 | — | 2026-10-01 | |
| CVE-2026-65592 | n8n before 1.123.64 Stored DOM XSS via cachedResultUrl | 8.4 | — | 2026-07-22 | |
| CVE-2026-118648 | n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy | 8.4 | — | 2026-10-29 | |
| CVE-2026-77072 | n8n before 1.123.69 Stored XSS via Form Completion Page | 8.4 | — | 2026-08-20 | |
| CVE-2026-77075 | n8n before 1.123.69 Expression Injection via Resource Locator | 8.4 | — | 2026-08-20 | |
| CVE-2026-45732 | n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints | 8.3 | — | 2026-06-23 | |
| CVE-2026-103246 | n8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool Introspection | 8.3 | — | 2026-10-01 | |
| CVE-2026-72766 | n8n before 1.123.67 Arbitrary File Read via Send Email Node | 8.2 | — | 2026-08-11 | |
| CVE-2026-110843 | n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint | 8.2 | — | 2026-10-15 | |
| CVE-2026-65597 | n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe | 8.2 | — | 2026-07-22 | |
| CVE-2026-103257 | n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node | 8.1 | — | 2026-10-01 | |
| CVE-2026-86083 | n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution | 7.7 | — | 2026-09-08 | |
| CVE-2026-85168 | n8n before 1.123.73 Remote Code Execution via Git Node | 7.7 | — | 2026-09-03 | |
| CVE-2026-110845 | n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation | 7.7 | — | 2026-10-15 | |
| CVE-2026-65016 | n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role | 7.7 | — | 2026-07-22 | |
| CVE-2026-72762 | n8n before 1.123.67 Arbitrary File Write via Edit Image Node | 7.7 | — | 2026-08-11 | |
| CVE-2026-110842 | n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter | 7.7 | — | 2026-10-15 | |
| CVE-2026-77084 | n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values | 7.7 | — | 2026-08-20 | |
| CVE-2026-126384 | n8n before 1.123.89 RCE via Bundled GraphicsMagick in Edit Image Node | 7.7 | 0.5% | 2026-11-13 | |
| CVE-2026-126391 | n8n before 1.123.89 RCE via Workflow Expression Evaluation Sandbox Escape | 7.7 | 0.5% | 2026-11-13 | |
| CVE-2026-59208 | n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution | 7.6 | — | 2026-07-09 | |
| CVE-2026-103251 | n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub | 7.5 | — | 2026-10-01 | |
| CVE-2026-77079 | n8n before 2.34.1 Authorization Bypass via Custom Role Deletion | 7.4 | — | 2026-08-20 | |
| CVE-2026-33722 | n8n Has External Secrets Authorization Bypass in Credential Saving | 7.3 | — | 2026-03-25 | |
| CVE-2026-85166 | n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node | 7.2 | — | 2026-09-03 | |
| CVE-2026-110849 | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview | 7.2 | — | 2026-10-15 | |
| CVE-2026-65015 | n8n before 2.30.1 Privilege Escalation via run_node_tool | 7.2 | — | 2026-07-22 | |
| CVE-2026-72763 | n8n before 1.123.67 Credential Exfiltration via Sub-Workflow | 7.2 | — | 2026-08-11 | |
| CVE-2026-77077 | n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution | 7.2 | — | 2026-08-20 | |
| CVE-2026-85165 | n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement | 7.2 | — | 2026-09-03 | |
| CVE-2026-54312 | n8n: Microsoft SQL Node Prototype Pollution | 7.2 | — | 2026-06-23 | |
| CVE-2026-110850 | n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters | 7.2 | — | 2026-10-15 | |
| CVE-2026-86082 | n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node | 7.1 | — | 2026-09-08 | |
| CVE-2026-27494 | n8n has Arbitrary File Read via Python Code Node Sandbox Escape | 7.1 | — | 2026-02-25 | |
| CVE-2026-77076 | n8n before 1.123.69 Credential Leak via GraphQL Node Error | 7.1 | — | 2026-08-20 | |
| CVE-2026-118646 | n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node | 7.1 | — | 2026-10-29 | |
| CVE-2026-72770 | n8n before 1.123.67 Path Traversal via Git Node Operations | 7.1 | — | 2026-08-11 | |
| CVE-2026-85171 | n8n before 1.123.73 Credential Exposure via Error Logging | 7.1 | — | 2026-09-03 | |
| CVE-2026-59207 | n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector | 7.1 | — | 2026-07-09 | |
| CVE-2026-77071 | n8n before 1.123.69 PostgREST Filter Injection via Supabase | 7.1 | — | 2026-08-20 | |
| CVE-2026-54304 | n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host | 7.1 | — | 2026-06-23 | |
| CVE-2026-72774 | n8n before 1.123.67 Authentication Bypass via HTTP Request Node | 7.1 | — | 2026-08-11 | |
| CVE-2026-118678 | n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction | 7.1 | — | 2026-10-29 | |
| CVE-2026-72771 | n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes | 7.1 | — | 2026-08-11 | |
| CVE-2026-103256 | n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook | 7.1 | — | 2026-10-01 | |
| CVE-2026-103255 | n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase | 7.1 | — | 2026-10-01 | |
| CVE-2026-86081 | n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path | 7.1 | — | 2026-09-09 | |
| CVE-2026-85170 | n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes | 7.1 | — | 2026-09-03 | |
| CVE-2026-27496 | n8n has In-Process Memory Disclosure in its Task Runner | 7.1 | — | 2026-03-25 | |
| CVE-2026-59206 | n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration | 7.1 | — | 2026-07-09 | |
| CVE-2026-77070 | n8n before 1.123.69 NoSQL Injection via MongoDB Node | 7.1 | — | 2026-08-20 | |
| CVE-2026-59209 | n8n: Shared Credential Header Leak via HTTP Request Pagination Expression | 7.1 | — | 2026-07-09 | |
| CVE-2026-49444 | n8n: Python sandbox escape | 7.1 | — | 2026-06-23 | |
| CVE-2026-103248 | n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase | 7.1 | — | 2026-10-01 | |
| CVE-2026-103252 | n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint | 7.1 | — | 2026-10-01 | |
| CVE-2026-25055 | n8n Arbitrary File Write on Remote Systems via SSH Node | 7.1 | — | 2026-02-04 | |
| CVE-2026-72749 | n8n before 1.123.67 Prototype Pollution via Edit Fields | 7.1 | — | 2026-08-11 | |
| CVE-2026-110847 | n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter | 7.0 | — | 2026-10-15 | |
| CVE-2026-110840 | n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field | 7.0 | — | 2026-10-15 | |
| CVE-2026-54301 | n8n: Same-Origin XSS in Respond to Webhook Node | 7.0 | — | 2026-06-23 | |
| CVE-2026-54302 | n8n: Stored XSS in Chat Trigger Node | 7.0 | — | 2026-06-23 | |
| CVE-2026-103253 | n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table | 7.0 | — | 2026-10-01 | |
| CVE-2026-110846 | n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook | 7.0 | — | 2026-10-15 | |
| CVE-2026-118645 | n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter | 7.0 | — | 2026-10-29 | |
| CVE-2026-103250 | n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memory | 7.0 | — | 2026-10-01 | |
| CVE-2026-103254 | n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation | 7.0 | — | 2026-10-01 | |
| CVE-2026-103249 | n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator | 6.9 | — | 2026-10-01 | |
| CVE-2026-103245 | n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification | 6.9 | — | 2026-10-01 | |
| CVE-2026-103258 | n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation | 6.9 | — | 2026-10-01 | |
| CVE-2026-118679 | n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger | 6.9 | — | 2026-10-29 | |
| CVE-2026-118641 | n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes | 6.9 | — | 2026-10-29 | |
| CVE-2026-54303 | n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints | 6.8 | — | 2026-06-23 | |
| CVE-2026-21894 | n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks | 6.5 | — | 2026-01-08 | |
| CVE-2026-54310 | n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes | 6.5 | — | 2026-06-23 | |
| CVE-2026-54313 | n8n: NoSQL Injection in MongoDB Node Find And Replace Operation | 6.5 | — | 2026-06-23 | |
| CVE-2026-72768 | n8n before 2.32.1 SSRF Protection Bypass via MCP Client | 6.4 | — | 2026-08-11 | |
| CVE-2026-33720 | n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK | 6.3 | — | 2026-03-25 | |
| CVE-2026-110852 | n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution | 6.3 | — | 2026-10-15 | |
| CVE-2026-59254 | n8n - External Secrets Disclosure via Workflow Node Expressions | 6.3 | — | 2026-07-15 | |
| CVE-2026-56353 | n8n - Authentication Bypass in Chat Trigger Node | 6.3 | — | 2026-07-15 | |
| CVE-2026-65014 | n8n before 2.28.0 Authentication Bypass via test-webhook | 6.3 | — | 2026-07-22 | |
| CVE-2026-86077 | n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket | 6.3 | — | 2026-09-08 | |
| CVE-2026-103260 | n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node | 6.3 | — | 2026-10-01 | |
| CVE-2026-54314 | n8n: Denial of Service via ZIP decompression in webhook workflow | 6.3 | — | 2026-06-23 | |
| CVE-2026-65593 | n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters | 6.3 | — | 2026-07-22 | |
| CVE-2026-56357 | n8n - Webhook Forgery via Missing HMAC-SHA256 Signature Verification in GitHub Webhook Trigger | 6.3 | — | 2026-06-22 | |
| CVE-2026-126390 | n8n before 1.123.89 NocoDB Node API Token Leak via Attachment Download | 6.3 | — | 2026-11-13 | |
| CVE-2026-54306 | n8n: Prototype Pollution enables confused-deputy execution via public webhooks | 6.3 | — | 2026-06-23 | |
| CVE-2026-56360 | n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger | 6.3 | — | 2026-07-08 | |
| CVE-2026-56349 | n8n - Guardrail Node Bypass via Crafted Input | 6.3 | — | 2026-07-15 | |
| CVE-2026-42228 | n8n: Hijacking of Unauthenticated Chat Execution | 6.3 | — | 2026-05-04 | |
| CVE-2026-33724 | n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no | 6.3 | — | 2026-03-25 | |
| CVE-2026-86080 | n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open | 6.3 | — | 2026-09-08 | |
| CVE-2026-33749 | n8n Vulnerable to XSS via Binary Data Inline HTML Rendering | 6.3 | — | 2026-03-25 | |
| CVE-2026-54308 | n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node | 6.3 | — | 2026-06-23 | |
| CVE-2026-86079 | n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers | 6.3 | — | 2026-09-08 | |
| CVE-2026-126389 | n8n before 1.123.89 Authentication Bypass via Chat Trigger Embedded Chat | 6.3 | — | 2026-11-13 | |
| CVE-2026-85167 | n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes | 6.3 | — | 2026-09-03 | |
| CVE-2026-77085 | n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool | 6.3 | — | 2026-08-20 | |
| CVE-2026-126388 | n8n before 2.46.1 Credential Leak via Cross-Origin Redirects in Nodes | 6.3 | 0.3% | 2026-11-13 | |
| CVE-2026-33751 | n8n Vulnerable to LDAP Filter Injection in LDAP Node | 6.3 | — | 2026-03-25 | |
| CVE-2026-126382 | n8n before 2.38.0 Authentication Bypass via Asana Trigger Webhook Secret Reset | 6.3 | — | 2026-11-13 | |
| CVE-2026-110851 | n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint | 6.1 | — | 2026-10-15 | |
| CVE-2026-110841 | n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval | 6.1 | — | 2026-10-15 | |
| CVE-2026-72769 | n8n before 1.123.67 Prototype Pollution via VM Expression Engine | 6.1 | — | 2026-08-11 | |
| CVE-2026-56350 | n8n - SSO Enforcement Bypass via API | 6.0 | — | 2026-06-30 | |
| CVE-2026-110848 | n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge | 6.0 | — | 2026-10-15 | |
| CVE-2026-77074 | n8n before 1.123.69 SSRF via Edit Image Node | 6.0 | — | 2026-08-20 | |
| CVE-2026-59259 | n8n - Permission Bypass via Expression Parser Mismatch in External Secrets | 6.0 | — | 2026-07-15 | |
| CVE-2026-77083 | n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution | 6.0 | — | 2026-08-20 | |
| CVE-2026-86078 | n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service | 6.0 | — | 2026-09-08 | |
| CVE-2026-42227 | n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure | 6.0 | — | 2026-05-04 | |
| CVE-2026-54311 | n8n: Merge Node SQL Mode Prototype Pollution | 6.0 | — | 2026-06-23 | |
| CVE-2026-49465 | n8n: Git Node Clone and Push Operations Bypass File Sandbox | 6.0 | — | 2026-06-23 | |
| CVE-2026-126387 | n8n before 2.46.1 Arbitrary File Read via Browser Use browser_upload Tool | 6.0 | 0.4% | 2026-11-13 | |
| CVE-2026-86084 | n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions | 6.0 | — | 2026-09-08 | |
| CVE-2026-86074 | n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content | 5.9 | — | 2026-09-08 | |
| CVE-2026-118677 | n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance | 5.9 | — | 2026-10-29 | |
| CVE-2026-86073 | n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution | 5.9 | — | 2026-09-08 | |
| CVE-2026-86993 | n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check | 5.9 | — | 2026-09-08 | |
| CVE-2026-92588 | n8n before 1.123.76 Improper Authorization via Source Control Push | 5.9 | — | 2026-09-17 | |
| CVE-2026-72775 | n8n before 1.123.67 SQL Injection via PostgresTrigger Node | 5.8 | — | 2026-08-11 | |
| CVE-2026-72764 | n8n before 1.123.67 Module Cache Poisoning via Code Node | 5.8 | — | 2026-08-11 | |
| CVE-2026-65590 | n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows | 5.5 | — | 2026-07-22 | |
| CVE-2026-86996 | n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy | 5.3 | — | 2026-09-08 | |
| CVE-2026-118643 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data | 5.3 | — | 2026-10-29 | |
| CVE-2026-42237 | n8n: SQL Injection in Snowflake and MySQL Nodes | 5.3 | — | 2026-05-04 | |
| CVE-2026-92587 | n8n before 1.123.76 Sandbox Escape via Git Relative URL | 5.3 | — | 2026-09-17 | |
| CVE-2026-56775 | n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints | 5.3 | — | 2026-07-08 | |
| CVE-2026-56777 | n8n - AST Validator Bypass in Python Code Node | 5.3 | — | 2026-06-30 | |
| CVE-2026-42233 | n8n: SQL Injection in Oracle Database Node via Limit Field | 5.3 | — | 2026-05-04 | |
| CVE-2026-56351 | n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes | 5.3 | — | 2026-06-24 | |
| CVE-2026-56352 | n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter | 5.3 | — | 2026-07-15 | |
| CVE-2026-85173 | n8n before 2.36.2 Missing Authorization via Insights API | 5.3 | — | 2026-09-03 | |
| CVE-2026-59257 | n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation | 5.3 | — | 2026-07-08 | |
| CVE-2026-56776 | n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint | 5.3 | — | 2026-07-08 | |
| CVE-2026-56348 | n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint | 5.3 | — | 2026-06-22 | |
| CVE-2026-58661 | n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint | 5.3 | — | 2026-07-10 | |
| CVE-2026-77082 | n8n before 1.123.69 ReDoS via Filter and Switch Node | 5.3 | — | 2026-08-20 | |
| CVE-2026-86994 | n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter | 5.3 | — | 2026-09-08 | |
| CVE-2026-77073 | n8n before 2.34.1 Cross-Project Credential Access via MCP | 5.3 | — | 2026-08-20 | |
| CVE-2026-86995 | n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository... | 5.3 | — | 2026-09-08 | |
| CVE-2026-59253 | n8n - Improper Authorization in Workflow Assignment to Folders | 5.3 | — | 2026-07-08 | |
| CVE-2026-118640 | n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass | 5.3 | — | 2026-10-29 | |
| CVE-2026-72750 | n8n before 1.123.67 SQL Injection via executeQuery Operation | 5.3 | — | 2026-08-11 | |
| CVE-2026-126383 | n8n before 1.123.89 NoSQL Injection via MongoDB Node Update Key | 5.3 | 0.3% | 2026-11-13 | |
| CVE-2026-56778 | n8n - Authorization Bypass in Public API Execution Retry Endpoint | 5.3 | — | 2026-07-08 | |
| CVE-2026-42229 | n8n: SQL Injection in SeaTable Node | 5.3 | — | 2026-05-04 | |
| CVE-2026-85172 | n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass | 5.3 | — | 2026-09-03 | |
| CVE-2026-118647 | n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data | 5.3 | — | 2026-10-29 | |
| CVE-2026-65596 | n8n before 1.123.64 Credential Exfiltration via GraphQL Node | 5.1 | — | 2026-07-22 | |
| CVE-2026-65594 | n8n before 2.30.1 Missing OAuth Authorization Check | 5.1 | — | 2026-07-22 | |
| CVE-2026-118675 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow | 5.1 | — | 2026-10-29 | |
| CVE-2026-118676 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass | 5.1 | — | 2026-10-29 | |
| CVE-2026-56354 | n8n - Cross-Site Scripting and Open Redirect in Form Node | 5.1 | — | 2026-07-10 | |
| CVE-2026-56358 | n8n - Stored Cross-Site Scripting in Form Trigger Node | 5.1 | — | 2026-06-24 | |
| CVE-2026-56356 | n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field | 5.1 | — | 2026-06-30 | |
| CVE-2026-65599 | n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header | 5.1 | — | 2026-07-22 | |
| CVE-2026-86085 | n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoin... | 5.1 | — | 2026-09-08 | |
| CVE-2026-42230 | n8n: Open Redirect in MCP OAuth Consent Flow | 5.1 | — | 2026-05-04 | |
| CVE-2026-126386 | n8n before 1.123.89 Open Redirect via MCP OAuth Dynamic Client Registration | 5.1 | — | 2026-11-13 | |
| CVE-2026-77081 | n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node | 5.1 | — | 2026-08-20 | |
| CVE-2026-118644 | n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance | 5.1 | — | 2026-10-29 | |
| CVE-2026-118642 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows | 5.1 | — | 2026-10-29 | |
| CVE-2026-65589 | n8n before 1.123.64 Credential Exposure via LLM Node Execution Data | 5.1 | — | 2026-07-22 | |
| CVE-2026-126381 | n8n before 2.44.1 SQL Injection via Vector Store (OracleDB) Metadata Filter Key | 4.9 | — | 2026-11-13 | |
| CVE-2026-72773 | n8n before 2.32.1 Path Traversal via computer-use search_files | 4.9 | — | 2026-08-11 | |
| CVE-2026-126385 | n8n before 2.46.1 OAuth Account Hijack via Unauthenticated Credential Callback | 4.8 | — | 2026-11-13 | |
| CVE-2026-56359 | n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL | 4.8 | — | 2026-07-08 | |
| CVE-2026-77069 | n8n before 1.123.69 SSRF Protection Bypass via OAuth2 | 2.3 | — | 2026-08-20 |
Verfolgen Sie diese Versionen auf Ihren eigenen Servern
InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.
Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).