Skip to content
OpenAdvisories
High WID-SEC-2026-1251 12 CVEs

n8n: Mehrere Schwachstellen

Published Apr 22, 2026 · Updated Jun 24, 2026 · Revision 6 · de-DE

Vendor: n8n Product: n8n Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, SQL-Injection-Angriffe durchzuführen, einen Denial-of-Service-Zustand verursachen, Cross-Site-Scripting-Angriffe durchzuführen, Benutzer auf bösartige Websites umzuleiten oder Sitzungen zu kapern.

Product

n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.

Vulnerabilities 12

  • Critical 9.4
    CVE-2026-42231 Public exploit

    n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the xml2js library used to parse XML request bodies in n8n's webhook handler allowed prototype pollution via a crafted XML payload. An authenticated …

    n8n-io n8n n8n npm
  • Critical 9.4
    CVE-2026-42232

    n8n: XML Node Prototype Pollution to RCE

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via the XML Node leading to RCE when combined with…

    n8n-io n8n n8n npm
  • High 8.8
    CVE-2026-42235

    n8n: XSS via MCP OAuth client

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an unauthenticated attacker could register a malicious MCP OAuth client with a crafted client_name. If a victim user authorized the OAuth consent dialog and a …

    n8n-io n8n n8n npm
  • High 8.7
    CVE-2026-42236

    n8n: Unauthenticated Denial of Service via MCP Client Registration

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the MCP OAuth client registration endpoint accepted unauthenticated requests and stored client data without adequate resource controls. An unauthenticated remo…

    n8n-io n8n n8n npm
  • High 7.1
    CVE-2026-42226

    n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay

    n8n is an open source workflow automation platform. Prior to versions 1.123.33 and 2.17.5, the dynamic-node-parameters endpoints did not verify whether the authenticated caller was authorized to use a supplied credential reference. An authenticated user with …

    n8n-io n8n n8n npm
  • High 7.1
    CVE-2026-42234

    n8n: Python Task Runner Sandbox Escape

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution…

    n8n-io n8n n8n npm
  • Medium 6.3
    CVE-2026-42228 Public exploit

    n8n: Hijacking of Unauthenticated Chat Execution

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /chat WebSocket endpoint used by the Chat Trigger node's Hosted Chat feature did not verify that an incoming connection was authorized to interact with the…

    n8n-io n8n n8n npm
  • Medium 6.0
    CVE-2026-42227

    n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with a valid API key scoped to variable:list could read variables from projects they are not a member of by supplying an arbitrary projec…

    n8n-io n8n n8n npm
  • Medium 5.3
    CVE-2026-42229

    n8n: SQL Injection in SeaTable Node

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the SeaTable node's row:search and row:get operations allowed user-controlled input to be concatenated directly into SQL query strings without escapi…

    n8n-io n8n n8n npm
  • Medium 5.3
    CVE-2026-42233

    n8n: SQL Injection in Oracle Database Node via Limit Field

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the Oracle Database node's select operation allowed user-controlled input passed into the Limit field via expressions to be interpolated directly int…

    n8n-io n8n n8n npm
  • Medium 5.3
    CVE-2026-42237

    n8n: SQL Injection in Snowflake and MySQL Nodes

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node or the legacy MySQL v1 node. Both nodes construct SQL queries by directly interpolating user-c…

    n8n-io n8n n8n npm
  • Medium 5.1
    CVE-2026-42230

    n8n: Open Redirect in MCP OAuth Consent Flow

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /mcp-oauth/register endpoint accepted OAuth client registrations without authentication, allowing arbitrary redirect_uri values to be registered. When a us…

    n8n-io n8n n8n npm

Revision history

  1. #6

    Referenz(en) aufgenommen: EUVD-2026-38753

  2. #5

    Referenzen überprüft

  3. #4

    CVE ergänzt

  4. #3

    Referenz(en) aufgenommen: EUVD-2026-27100, EUVD-2026-27098, EUVD-2026-27096, EUVD-2026-27095, EUVD-2026-27093, EUVD-2026-27113, EUVD-2026-27111, EUVD-2026-27110, EUVD-2026-27109, EUVD-2026-27107, EUVD-2026-27104, EUVD-2026-27102

  5. #2

    CVE's ergänzt

  6. #1

    Initiale Fassung

References