Skip to content
OpenAdvisories
High WID-SEC-2026-1519 6 CVEs

n8n: Mehrere Schwachstellen

Published May 12, 2026 · Updated Jun 23, 2026 · Revision 4 · de-DE

Vendor: n8n Product: n8n Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

Product

n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.

Vulnerabilities 6

  • Critical 9.4
    CVE-2026-44789 Public exploit

    n8n: HTTP Request Node Pagination Prototype Pollution to RCE

    n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via an unvalidated pagination parameter in the HTTP Request…

    n8n-io n8n n8n npm
  • Critical 9.4
    CVE-2026-44790

    n8n: Arbitrary File Read via Git Node

    n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could inject CLI flags on the Git node's Push operation allowing an attacker to read arbitrary files…

    n8n-io n8n n8n npm
  • Critical 9.4
    CVE-2026-44791

    n8n: XML Node Prototype Pollution Patch Bypass

    n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this coul…

    n8n-io n8n n8n npm
  • Critical 9.1
    CVE-2026-56348

    n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint

    n8n before 2.20.0 contains a credential exfiltration vulnerability in the POST /rest/dynamic-node-parameters/options endpoint that allows authenticated users to bypass Allowed HTTP Request Domains restrictions. Attackers with credential access can cause the n…

    n8n n8n n8n npm
  • High 8.9
    CVE-2026-44792

    n8n: Source Control Pull SQL Injection

    n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted …

    n8n-io n8n n8n npm
  • High 8.3
    CVE-2026-45732

    n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints

    n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credential reconnect endpoints authorized access using credential:read rather than credential:update. An authenticated user with read-only access …

    n8n-io n8n n8n npm

Revision history

  1. #4

    Referenz(en) aufgenommen: EUVD-2026-38486, EUVD-2026-38484, EUVD-2026-38483, EUVD-2026-38482, EUVD-2026-38485

  2. #3

    CVE ergänzt

  3. #2

    Ergänzung Version 2.21.1; Anpassung Versionszuordnungen

  4. #1

    Initiale Fassung

References