n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node…
Affects: n8n
n8n vulnerabilities
- Product
- n8n
- Vendor
- n8n
- Kind
- Workflow automation platform
Securaity has published 150 advisories for n8n: 16 Critical, 64 High, 70 Medium.
n8n is a workflow automation platform made and maintained by n8n. It connects apps and services into automated workflows, so information can move from one tool to the next without someone copying it over by hand. Those workflows can include steps that call AI models alongside the other apps in the chain. The people who usually install and run n8n are operations staff, IT staff and developers whose job involves automating work between the apps their organization relies on day to day.
Advisories
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
Affects: n8n
n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git…
Affects: n8n
n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
Affects: n8n
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
Affects: n8n
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role…
Affects: n8n
n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
Affects: n8n
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code…
Affects: n8n
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
Affects: n8n
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to…
Affects: n8n
n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
Affects: n8n
n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
Affects: n8n
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Affects: n8n
n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution
Affects: n8n
n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
Affects: n8n
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
Affects: n8n
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
Affects: n8n
n8n: N8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the…
Affects: n8n
n8n: N8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy…
Affects: n8n
n8n: N8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the…
Affects: n8n
n8n: N8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) and…
Affects: n8n
n8n: N8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the…
Affects: n8n
n8n: N8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability…
Affects: n8n
n8n: N8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the…
Affects: n8n
n8n: N8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline…
Affects: n8n
n8n: N8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free…
Affects: n8n
n8n: N8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG…
Affects: n8n
n8n: N8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1) contains a code execution vulnerability in…
Affects: n8n
n8n: In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read…
Affects: n8n
n8n: N8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role…
Affects: n8n
n8n: N8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox…
Affects: n8n
n8n: N8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection…
Affects: n8n
n8n: N8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit…
Affects: n8n
n8n: N8n versions before 2.34.1 contain a credential validation bypass in the MCP…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2…
Affects: n8n
n8n: N8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP…
Affects: n8n
n8n: N8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the…
Affects: n8n
n8n: N8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange…
Affects: n8n
n8n: N8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in…
Affects: n8n
n8n: N8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM…
Affects: n8n