Skip to content
OpenAdvisories
High WID-SEC-2026-2489 15 CVEs

n8n: Mehrere Schwachstellen

Published Jul 22, 2026 · Updated Aug 11, 2026 · Revision 2 · de-DE

Vendor: n8n Product: n8n Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.

Product

n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.

Vulnerabilities 15

  • High 8.9
    CVE-2026-72772

    n8n before 2.32.1 Authentication Bypass via Token Exchange

    n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was ver…

    n8n-io n8n n8n npm
  • High 8.7
    CVE-2026-72765

    n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape

    n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, trigge…

    n8n-io n8n n8n npm
  • High 8.7
    CVE-2026-72767

    n8n before 1.123.67 Remote Code Execution via Git node

    n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks u…

    n8n-io n8n n8n npm
  • High 8.2
    CVE-2026-72766

    n8n before 1.123.67 Arbitrary File Read via Send Email Node

    n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the…

    n8n-io n8n n8n npm
  • High 7.7
    CVE-2026-72762

    n8n before 1.123.67 Arbitrary File Write via Edit Image Node

    n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation. An authenticated user able to run workflows can…

    n8n-io n8n n8n npm
  • High 7.2
    CVE-2026-72763

    n8n before 1.123.67 Credential Exfiltration via Sub-Workflow

    n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow (when w…

    n8n-io n8n n8n npm
  • High 7.1
    CVE-2026-72749

    n8n before 1.123.67 Prototype Pollution via Edit Fields

    n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields (Set) node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a fiel…

    n8n-io n8n n8n npm
  • High 7.1
    CVE-2026-72770

    n8n before 1.123.67 Path Traversal via Git Node Operations

    n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations that allows authenticated users to bypass repository-path containment checks. Attackers with workflow create/execute rights can point a…

    n8n-io n8n n8n npm
  • High 7.1
    CVE-2026-72771

    n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes

    n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect…

    n8n-io n8n n8n npm
  • High 7.1
    CVE-2026-72774

    n8n before 1.123.67 Authentication Bypass via HTTP Request Node

    n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credential type via an expr…

    n8n-io n8n n8n npm
  • Medium 6.4
    CVE-2026-72768

    n8n before 2.32.1 SSRF Protection Bypass via MCP Client

    n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. Attackers can craft workflows that send requests to internal or blocked hosts w…

    n8n-io n8n n8n npm
  • Medium 6.1
    CVE-2026-72769

    n8n before 1.123.67 Prototype Pollution via VM Expression Engine

    n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expression engine. An authenticated user able to create or edit a workflow expression can abuse the engine's array-element access to obtain a reference to a host bu…

    n8n-io n8n n8n npm
  • Medium 5.8
    CVE-2026-72764

    n8n before 1.123.67 Module Cache Poisoning via Code Node

    n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions (before 1.123.67, 2.31.5, and 2.32.1), a user able to run a Code node could poison a cached module and thereby alter other users' Code-node …

    n8n-io n8n n8n npm
  • Medium 5.3
    CVE-2026-72750

    n8n before 1.123.67 SQL Injection via executeQuery Operation

    n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directly into the SQL string. When a workflow author embeds untrusted, externally-controlled e…

    n8n-io n8n n8n npm
  • Medium 4.9
    CVE-2026-72773

    n8n before 2.32.1 Path Traversal via computer-use search_files

    n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured dire…

    n8n-io n8n n8n npm

Revision history

  1. #2

    Referenz(en) aufgenommen: CVE-2026-72764, EUVD-2026-56143, CVE-2026-72766, EUVD-2026-56145, CVE-2026-72772, EUVD-2026-56098, EUVD-2026-56101, CVE-2026-72773, EUVD-2026-56099, CVE-2026-72767, EUVD-2026-56093, CVE-2026-72770, EUVD-2026-56096, CVE-2026-72771, EUVD-2026-56097, CVE-2026-72765, EUVD-2026-56144, CVE-2026-72769, EUVD-2026-56095, CVE-2026-72762, EUVD-2026-56141, CVE-2026-72750, EUVD-2026-56140, CVE-2026-72749, EUVD-2026-56139, CVE-2026-72768, EUVD-2026-56094, CVE-2026-72774, EUVD-2026-56100, CVE-2026-72763, EUVD-2026-56142

  2. #1

    Initiale Fassung

References