n8n: N8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the…
n8n
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-77068
- Affects
- n8n
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 20, 2026
- Source last modified
- September 1, 2026
Description
n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader derives a node's schema module path directly from the attacker-supplied node type string without validating path-traversal sequences. An authenticated user with global:member privileges can reference malicious files via path traversal, causing code execution in the n8n main process.
Description quoted from the NVD record.
Who is affected
This problem affects n8n, a tool for automating routine tasks by connecting apps and online services into step-by-step workflows. It affects versions before 2.33.4, and versions in the 2.34 series before 2.34.1. The flaw is in a part of the product that loads information about workflow building blocks. Anyone who is signed in with an ordinary member account could trick this part into opening harmful files and run their own code inside the main n8n program. This flaw is rated High.
What to do
- Check which version of n8n your organization runs. Any version before 2.33.4, or a 2.34 version before 2.34.1, has this flaw.
- The person who installed or runs n8n should update it to version
2.33.4, or to2.34.1if you use the 2.34 series. - If an IT provider or vendor runs n8n for your organization, send them this advisory and ask when the update will be done.
- No workaround is named for this flaw, so installing the fixed version is the way to close it.
Analysis written from the source record as of September 1, 2026 and reviewed before publishing.