CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,500 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,500
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product n8n_io:n8n. Show all products

93 CVEs, showing 51 to 93PreviousPage 2 of 2
CVESeverityTitlePublished
CVE-2026-86085Medium 5.1n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86084Medium 6.0n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86083High 7.7n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86082High 7.1n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86081High 7.1n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86080Medium 6.3n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86079Medium 6.3n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86078Medium 6.0n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86077Medium 6.3n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86076High 8.7n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-86075High 8.7n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
Assigned by GitHub_M
Sep 8, 2026
CVE-2026-92587Medium 5.0n8n before 1.123.76 Sandbox Escape via Git Relative URL
Assigned by VulnCheck
Sep 16, 2026
CVE-2026-92588Medium 4.4n8n before 1.123.76 Improper Authorization via Source Control Push
Assigned by VulnCheck
Sep 16, 2026
CVE-2026-103245Medium 5.3n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103246High 7.7n8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool Introspection
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103247High 8.5n8n before 1.123.80 Credential Tampering via Duplicate Node IDs
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103248Critical 9.0n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103249High 7.6n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103250High 8.1n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memory
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103251High 7.1n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103252High 7.7n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103253High 8.7n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103254Medium 6.3n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103255Critical 9.0n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103256High 7.1n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103257High 7.7n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103258Medium 6.8n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103259High 7.6n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-103260Medium 4.0n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node
Assigned by VulnCheck
Oct 1, 2026
CVE-2026-110840High 7.0n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110841Medium 6.1n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110842High 7.7n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110843High 8.2n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110844High 7.2n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110845High 7.7n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110846High 7.0n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110847High 7.0n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110848Medium 6.0n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110849High 7.2n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110850High 7.2n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110851Medium 6.1n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110852Medium 6.3n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution
Assigned by VulnCheck
Oct 14, 2026
CVE-2026-110853High 7.1n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON
Assigned by VulnCheck
Oct 14, 2026
PreviousPage 2 of 2

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.