Skip to content
OpenAdvisories
High WID-SEC-2026-2681 17 CVEs

n8n: Mehrere Schwachstellen

Published Aug 5, 2026 · Updated Aug 20, 2026 · Revision 2 · de-DE

Vendor: n8n Product: n8n Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting oder Server-Side Request Forgery durchzuführen oder einen Denial-of-Service-Zustand herbeizuführen.

Product

n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.

Vulnerabilities 17

  • High 8.7
    CVE-2026-77068

    n8n before 2.34.1 Remote Code Execution via Path Traversal

    n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader derives a node's schema module path directly from the attacker-supplied node type…

    n8n-io n8n
  • High 8.7
    CVE-2026-77080

    n8n before 1.123.69 Arbitrary File Read and Write via Snowflake

    n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read and write vulnerability in the Snowflake node, which passes free-form Execute Query input, including client-side commands, directly to the Snowflake SDK without ap…

    n8n-io n8n
  • High 8.4
    CVE-2026-77072

    n8n before 1.123.69 Stored XSS via Form Completion Page

    n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completion page. The completion page applied its sandboxing Content-Security-Policy only when respondWith was not set to 'redirect', but responseTe…

    n8n-io n8n
  • High 8.4
    CVE-2026-77075

    n8n before 1.123.69 Expression Injection via Resource Locator

    n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor spliced the field's stored value directly into the node type's URL template without che…

    n8n-io n8n
  • High 7.7
    CVE-2026-77084

    n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values

    n8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1) contains a code execution vulnerability in the Git node. The Git node executed certain repository-local git configuration values without neutralizing them, so any subsequent Git node operation against a rep…

    n8n-io n8n
  • High 7.4
    CVE-2026-77079

    n8n before 2.34.1 Authorization Bypass via Custom Role Deletion

    n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion (reassignment) path. When deleting a custom project role with a reassignment target, the code validated only that the target role existed and was project-scoped,…

    n8n-io n8n
  • High 7.2
    CVE-2026-77077

    n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution

    n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox escape. The runner's prototype-freezing routine covers globalThis functions but not internal module constructors such as EventEmitter, allowing an authenticated user …

    n8n-io n8n
  • High 7.1
    CVE-2026-77070

    n8n before 1.123.69 NoSQL Injection via MongoDB Node

    n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacke…

    n8n-io n8n
  • High 7.1
    CVE-2026-77071

    n8n before 1.123.69 PostgREST Filter Injection via Supabase

    n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Many, Delete, and Update operations, which built filter queries by concatenating an expression-bindable value without escaping. An attac…

    n8n-io n8n
  • High 7.1
    CVE-2026-77076

    n8n before 1.123.69 Credential Leak via GraphQL Node Error

    n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. When a GraphQL request fails at the connection level, the node re-throws the underlying HTTP client error unchanged instead of wrapping it in…

    n8n-io n8n
  • Medium 6.3
    CVE-2026-77085

    n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool

    n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client that did not route through n8n's centralized SSRF protection. On instances wit…

    n8n-io n8n
  • Medium 6.0
    CVE-2026-77074

    n8n before 1.123.69 SSRF via Edit Image Node

    n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requ…

    n8n-io n8n
  • Medium 6.0
    CVE-2026-77083

    n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution

    n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to…

    n8n-io n8n
  • Medium 5.3
    CVE-2026-77073

    n8n before 2.34.1 Cross-Project Credential Access via MCP

    n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unautho…

    n8n-io n8n
  • Medium 5.3
    CVE-2026-77082

    n8n before 1.123.69 ReDoS via Filter and Switch Node

    n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service (ReDoS) vulnerability in the Filter and Switch nodes, which compile user-supplied regex patterns with new RegExp() and execute them synchronously …

    n8n-io n8n
  • Medium 5.1
    CVE-2026-77081

    n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node

    n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the node's Authentication parameter is set to expression mode, every authentication-gated credential selector is treated as active; if tw…

    n8n-io n8n
  • Low 2.3
    CVE-2026-77069

    n8n before 1.123.69 SSRF Protection Bypass via OAuth2

    n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-to-access-token exchange. While OAuth2 discovery and dynamic-client-registration requests use n8n's SSRF-protected HTTP client, the token ex…

    n8n-io n8n

Revision history

  1. #2

    Referenz(en) aufgenommen: CVE-2026-77081, EUVD-2026-63269, GHSA-JRHF-3PW6-QQWV, CVE-2026-77080, EUVD-2026-63268, GHSA-F4H2-4C4X-G885, CVE-2026-77068, EUVD-2026-63257, CVE-2026-77070, EUVD-2026-63259, CVE-2026-77071, EUVD-2026-63260, CVE-2026-77075, EUVD-2026-63264, GHSA-VP98-5689-MC9F, CVE-2026-77074, GHSA-H3RW-RG69-FPPW, CVE-2026-77085, GHSA-GVF5-4G66-F766, GHSA-4X9Q-XQFH-JH4J, EUVD-2026-63263, CVE-2026-77073, EUVD-2026-63262, CVE-2026-77079, EUVD-2026-63267, GHSA-49Q9-J3MM-WGH5, CVE-2026-77084, EUVD-2026-63272, GHSA-FV4X-PGRR-XH57, CVE-2026-77083, EUVD-2026-63271, GHSA-2664-HR5V-554W, CVE-2026-77082, EUVD-2026-63270, GHSA-JXF5-F3HG-VXVJ, CVE-2026-77076, EUVD-2026-63265, GHSA-8329-W544-9MX3, CVE-2026-77069, EUVD-2026-63258, CVE-2026-77072, EUVD-2026-63261, CVE-2026-77077, EUVD-2026-63266, GHSA-25G8-CWM4-WQR3

  2. #1

    Initiale Fassung

References