Skip to content
OpenAdvisories
High WID-SEC-2026-1875 18 CVEs

n8n: Mehrere Schwachstellen

Published Jun 10, 2026 · Updated Jul 8, 2026 · Revision 5 · de-DE

Vendor: n8n Product: n8n Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was weitere Angriffe einschließlich einer Rechteausweitung ermöglichen kann.

Product

n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.

Vulnerabilities 18

  • High 8.9
    CVE-2026-54305

    n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

    n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without performing per-resource ownership or scope checks on the targe…

    n8n-io n8n n8n npm
  • High 8.8
    CVE-2026-54309

    n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

    n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint accepts session initialization and tool invocation requests without any authentication. Any network-reachable…

    n8n-io n8n n8n npm
  • High 8.5
    CVE-2026-54307

    n8n: Credential Exfiltration via Permission Bypass

    n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks w…

    n8n-io n8n n8n npm
  • High 7.4
    CVE-2026-56776

    n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint

    n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/new endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access…

    n8n n8n n8n npm
  • High 7.2
    CVE-2026-54312

    n8n: Microsoft SQL Node Prototype Pollution

    n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via the Microsoft SQL node by supplying a crafted value as the table parameter. T…

    n8n-io n8n n8n npm
  • High 7.1
    CVE-2026-54304

    n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host

    n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authenticated user with permission to create or modify workflows and access to a SecurityScorecard credential with limited allowed domains could configure the Securi…

    n8n-io n8n n8n npm
  • High 7.0
    CVE-2026-54301

    n8n: Same-Origin XSS in Respond to Webhook Node

    n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could configure a Respond to Webhook node to serve binary content with an attacker-controlled Content-Type. The binary r…

    n8n-io n8n n8n npm
  • High 7.0
    CVE-2026-54302

    n8n: Stored XSS in Chat Trigger Node

    n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could inject arbitrary JavaScript into the Chat Trigger's generated page by setting a malicious webhookId. When a logged…

    n8n-io n8n n8n npm
  • Medium 6.8
    CVE-2026-54303

    n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints

    n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response without sanitization or Content-Security-Policy headers, enabling reflected XSS in…

    n8n-io n8n n8n npm
  • Medium 6.5
    CVE-2026-54310

    n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes

    n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameters to the TimescaleDB and/or legacy Postgres v1 node's allowing arbitrary SQL to…

    n8n-io n8n n8n npm
  • Medium 6.5
    CVE-2026-54313

    n8n: NoSQL Injection in MongoDB Node Find And Replace Operation

    n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace operation. The value was not validated before being passed to Mon…

    n8n-io n8n n8n npm
  • Medium 6.4
    CVE-2026-56778

    n8n - Authorization Bypass in Public API Execution Retry Endpoint

    n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access to a shared …

    n8n n8n n8n npm
  • Medium 6.3
    CVE-2026-54306

    n8n: Prototype Pollution enables confused-deputy execution via public webhooks

    n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototype pollution vulnerability allowed a crafted public webhook payload to inject attacker-controlled fields into workflow data during internal object copying. These fields c…

    n8n-io n8n n8n npm
  • Medium 6.3
    CVE-2026-54308

    n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node

    n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent365Trigger and StripeTrigger node did not validate that inbound requests. As a result, an unauthenticated attacker who knows the webhook URL could submit a forge…

    n8n-io n8n n8n npm
  • Medium 6.3
    CVE-2026-54314

    n8n: Denial of Service via ZIP decompression in webhook workflow

    n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompressed output size. An unauthenticated attacker could send a s…

    n8n-io n8n n8n npm
  • Medium 6.0
    CVE-2026-54311

    n8n: Merge Node SQL Mode Prototype Pollution

    n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could pollute the sandbox used by the Merge node's SQL Query mode. Because the sandbox context was cached and r…

    n8n-io n8n n8n npm
  • Medium 5.4
    CVE-2026-56775

    n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints

    n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing actions using the workflow:read scope instead of the action-appropriate workflow:execute scope. On in…

    n8n n8n n8n npm
  • Medium 5.0
    CVE-2026-56777

    n8n - AST Validator Bypass in Python Code Node

    n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security validator bypass in the Python Code node. An authenticated user with permission to create or modify workflows containing a Python Code node can bypass the validator and…

    n8n n8n n8n npm

Revision history

  1. #5

    Referenz(en) aufgenommen: CVE-2026-56778, EUVD-2026-42264, CVE-2026-56776, EUVD-2026-42263, CVE-2026-56775, EUVD-2026-42262, GHSA-W79J-MF7M-GFPM

  2. #4

    Referenz(en) aufgenommen: CVE-2026-56777, EUVD-2026-40453

  3. #3

    Referenz(en) aufgenommen: CVE-2026-54303, EUVD-2026-38460, EUVD-2026-38462, EUVD-2026-38461, EUVD-2026-38459, EUVD-2026-38468, EUVD-2026-38471, EUVD-2026-38470, EUVD-2026-38477, EUVD-2026-38476, EUVD-2026-38475, EUVD-2026-38474, EUVD-2026-38473, EUVD-2026-38479, EUVD-2026-38478

  4. #2

    CVE-Nummern ergänzt

  5. #1

    Initiale Fassung

References