n8n: N8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability…
Affects: n8n
n8n vulnerabilities
- Product
- n8n
- Vendor
- n8n
- Kind
- Workflow automation platform
Securaity has published 150 advisories for n8n: 16 Critical, 64 High, 70 Medium.
n8n is a workflow automation platform made and maintained by n8n. It connects apps and services into automated workflows, so information can move from one tool to the next without someone copying it over by hand. Those workflows can include steps that call AI models alongside the other apps in the chain. The people who usually install and run n8n are operations staff, IT staff and developers whose job involves automating work between the apps their organization relies on day to day.
Advisories
n8n: N8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution…
Affects: n8n
n8n: N8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion…
Affects: n8n
n8n: N8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression…
Affects: n8n
n8n: N8n's JavaScript task runner shared a single module cache across all users' Code-node executions
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level…
Affects: n8n
n8n: N8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit…
Affects: n8n
n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression…
Affects: n8n
n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on…
Affects: n8n
n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner
Affects: n8n
n8n: External Secrets Accessible via Workflow Expressions Outside Credentials
Affects: n8n
n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base…
Affects: n8n
n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service
Affects: n8n
n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service
Affects: n8n
n8n: Edit Image Node Format Injection Allows Arbitrary File Write
Affects: n8n
n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON
Affects: n8n
n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`
Affects: n8n
n8n: Expression sandbox escape via arrow-function bodies enabling command execution
Affects: n8n
n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion
Affects: n8n
n8n: Authenticated code execution in the n8n Git node
Affects: n8n
n8n: SSRF Protection Bypass via MCP Client Node
Affects: n8n
n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction
Affects: n8n
n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes
Affects: n8n
n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login
Affects: n8n
n8n: Google Service Account Private Key Exposed in JWT Header
Affects: n8n
n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
Affects: n8n
n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview
Affects: n8n
n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction
Affects: n8n
n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token…
Affects: n8n
n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth…
Affects: n8n
n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access
Affects: n8n
n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`
Affects: n8n
n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution
Affects: n8n
n8n: Computer-use Shell Sandbox Not Enforced on Linux and Windows
Affects: n8n
n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
Affects: n8n
n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner
Affects: n8n
n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
Affects: n8n
n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook
Affects: n8n
n8n: External Secrets Permission Bypass via Expression Parser Mismatch
Affects: n8n
n8n: N8n contains an authentication bypass in the Chat Trigger node when configured with n8n User…
Affects: n8n
n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads
Affects: n8n
n8n: N8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-site…
Affects: n8n
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
Affects: n8n
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
Affects: n8n
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
Affects: n8n
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project…
Affects: n8n
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression…
Affects: n8n
n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other…
Affects: n8n