InfraGuard
Iniciar sesión Pruébalo ahora Comprar ahora

Vulnerabilidades de n8n (lista de CVE)

245 CVE1 KEV10.0 CVSS máx.

Ramas de versiones afectadas

Vulnerabilidades conocidas

CVE Título Versiones afectadas CVSS Explotada EPSS Publicación
CVE-2025-68613 n8n Vulnerable to Remote Code Execution via Expression Injection ≥ 0.211.0 < 1.120.4 ≥ 1.121.0 < 1.121.1 * 8.8 KEV 99.0% 2025-12-19
CVE-2026-126381 n8n before 2.44.1 SQL Injection via Vector Store (OracleDB) Metadata Filter Key ≥ 2.44.0 < 2.44.1 < 2.43.5 ≥ 3.0.0 < 3.0.1 4.9 — 2026-11-13
CVE-2026-126382 n8n before 2.38.0 Authentication Bypass via Asana Trigger Webhook Secret Reset < 2.38.0 ≥ 3.0.0 < 3.0.1 6.3 — 2026-11-13
CVE-2026-126384 n8n before 1.123.89 RCE via Bundled GraphicsMagick in Edit Image Node < 1.123.89 ≥ 2.46.0 < 2.46.1 ≥ 2.0.0 < 2.45.5 7.7 0.5% 2026-11-13
CVE-2026-126383 n8n before 1.123.89 NoSQL Injection via MongoDB Node Update Key < 1.123.89 ≥ 2.46.0 < 2.46.1 ≥ 2.0.0 < 2.45.5 5.3 0.3% 2026-11-13
CVE-2026-126385 n8n before 2.46.1 OAuth Account Hijack via Unauthenticated Credential Callback ≥ 2.46.0 < 2.46.1 < 2.45.5 ≥ 3.0.0 < 3.0.1 4.8 — 2026-11-13
CVE-2026-126386 n8n before 1.123.89 Open Redirect via MCP OAuth Dynamic Client Registration < 1.123.89 ≥ 2.46.0 < 2.46.1 ≥ 2.0.0 < 2.45.5 5.1 — 2026-11-13
CVE-2026-126387 n8n before 2.46.1 Arbitrary File Read via Browser Use browser_upload Tool ≥ 2.46.0 < 2.46.1 < 2.45.5 ≥ 3.0.0 < 3.0.1 6.0 0.4% 2026-11-13
CVE-2026-126388 n8n before 2.46.1 Credential Leak via Cross-Origin Redirects in Nodes ≥ 2.46.0 < 2.46.1 < 2.45.5 ≥ 3.0.0 < 3.0.1 6.3 0.3% 2026-11-13
CVE-2026-126389 n8n before 1.123.89 Authentication Bypass via Chat Trigger Embedded Chat < 1.123.89 ≥ 2.46.0 < 2.46.1 ≥ 2.0.0 < 2.45.5 6.3 — 2026-11-13
CVE-2026-126390 n8n before 1.123.89 NocoDB Node API Token Leak via Attachment Download < 1.123.89 ≥ 2.46.0 < 2.46.1 ≥ 2.0.0 < 2.45.5 6.3 — 2026-11-13
CVE-2026-126391 n8n before 1.123.89 RCE via Workflow Expression Evaluation Sandbox Escape < 1.123.89 ≥ 2.46.0 < 2.46.1 ≥ 2.0.0 < 2.45.5 7.7 0.5% 2026-11-13
CVE-2026-119557 n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node ≥ 2.14.0 ≤ 2.46.3 8.2 — 2026-10-30
CVE-2026-119408 n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes ≥ 2.43.0 < 2.43.3 < 2.42.6 ≥ 3.0.0 < 3.0.1 8.7 — 2026-10-30
CVE-2026-118679 n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger < 1.123.83 ≥ 2.42.0 < 2.42.1 ≥ 2.0.0 < 2.41.4 6.9 — 2026-10-29
CVE-2026-118678 n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction < 2.41.4 ≥ 2.42.0 < 2.42.1 7.1 — 2026-10-29
CVE-2026-118676 n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 5.1 — 2026-10-29
CVE-2026-118677 n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance ≥ 2.42.0 < 2.42.1 < 2.41.4 5.9 — 2026-10-29
CVE-2026-118675 n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 5.1 — 2026-10-29
CVE-2026-118649 n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables ≥ 2.44.0 < 2.44.1 < 2.43.5 8.7 — 2026-10-29
CVE-2026-118647 n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 5.3 — 2026-10-29
CVE-2026-118648 n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 8.4 — 2026-10-29
CVE-2026-118646 n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 7.1 — 2026-10-29
CVE-2026-118644 n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance ≥ 2.42.0 < 2.42.2 < 2.41.5 5.1 — 2026-10-29
CVE-2026-118645 n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 7.0 — 2026-10-29
CVE-2026-118643 n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 5.3 — 2026-10-29
CVE-2026-118642 n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 5.1 — 2026-10-29
CVE-2026-118641 n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 6.9 — 2026-10-29
CVE-2026-118640 n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass < 1.123.85 ≥ 2.44.0 < 2.44.1 ≥ 2.0.0 < 2.43.5 5.3 — 2026-10-29
CVE-2026-110853 n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON < 1.123.83 7.1 — 2026-10-15
CVE-2026-110852 n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution < 1.123.83 ≥ 2.0.0 < 2.41.4 ≥ 2.42.0 < 2.42.1 6.3 — 2026-10-15
CVE-2026-110851 n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint < 2.41.4 ≥ 2.42.0 < 2.42.1 6.1 — 2026-10-15
CVE-2026-110850 n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters < 2.41.4 ≥ 2.42.0 < 2.42.1 7.2 — 2026-10-15
CVE-2026-110849 n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview < 1.123.83 ≥ 2.0.0 < 2.41.4 ≥ 2.42.0 < 2.42.1 7.2 — 2026-10-15
CVE-2026-110848 n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge < 1.123.83 ≥ 2.0.0 < 2.41.4 ≥ 2.42.0 < 2.42.1 6.0 — 2026-10-15
CVE-2026-110847 n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter < 1.123.83 ≥ 2.0.0 < 2.41.4 ≥ 2.42.0 < 2.42.1 7.0 — 2026-10-15
CVE-2026-110846 n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook < 2.41.4 ≥ 2.42.0 < 2.42.1 7.0 — 2026-10-15
CVE-2026-110845 n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation < 1.123.83 ≥ 2.0.0 < 2.41.4 ≥ 2.42.0 < 2.42.1 7.7 — 2026-10-15
CVE-2026-110844 n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows < 1.123.83 7.2 — 2026-10-15
CVE-2026-110843 n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint < 2.41.4 ≥ 2.42.0 < 2.42.1 8.2 — 2026-10-15
CVE-2026-110842 n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter < 2.41.4 ≥ 2.42.0 < 2.42.1 7.7 — 2026-10-15
CVE-2026-110841 n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval < 2.41.4 6.1 — 2026-10-15
CVE-2026-110840 n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field < 2.41.4 ≥ 2.42.0 < 2.42.1 7.0 — 2026-10-15
CVE-2026-103260 n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node < 2.39.6 ≥ 2.40.0 < 2.40.1 6.3 — 2026-10-01
CVE-2026-103259 n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials < 2.39.6 ≥ 2.40.0 < 2.40.1 8.5 — 2026-10-01
CVE-2026-103258 n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation < 2.39.6 ≥ 2.40.0 < 2.40.1 6.9 — 2026-10-01
CVE-2026-103257 n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 8.1 — 2026-10-01
CVE-2026-103255 n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 7.1 — 2026-10-01
CVE-2026-103256 n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook < 2.39.6 ≥ 2.40.0 < 2.40.1 7.1 — 2026-10-01
CVE-2026-103254 n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 7.0 — 2026-10-01
CVE-2026-103253 n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 7.0 — 2026-10-01
CVE-2026-103251 n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 7.5 — 2026-10-01
CVE-2026-103252 n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 7.1 — 2026-10-01
CVE-2026-103250 n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memory < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 7.0 — 2026-10-01
CVE-2026-103248 n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 7.1 — 2026-10-01
CVE-2026-103249 n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 6.9 — 2026-10-01
CVE-2026-103247 n8n before 1.123.80 Credential Tampering via Duplicate Node IDs < 1.123.80 5.8 — 2026-10-01
CVE-2026-103246 n8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool Introspection < 2.39.6 ≥ 2.40.0 < 2.40.1 8.3 — 2026-10-01
CVE-2026-103245 n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification < 1.123.80 ≥ 2.0.0 < 2.39.6 ≥ 2.40.0 < 2.40.1 6.9 — 2026-10-01
CVE-2026-92588 n8n before 1.123.76 Improper Authorization via Source Control Push < 1.123.76 ≥ 2.38.0 < 2.38.2 ≥ 2.0.0-rc.0 < 2.37.7 5.9 — 2026-09-17
Sitio web oficial Código fuente Ficha en SolutionMarket

Controla estas versiones en tus propios servidores

InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.

Prueba la demo en vivo Comprar ahora

Resumen semanal de vulnerabilidades explotadas

Las incorporaciones a KEV relevantes para servidores autoalojados, una vez por semana. Ningún otro correo.

Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).