Skip to content
OpenAdvisories
High WID-SEC-2026-2936 9 CVEs

n8n: Mehrere Schwachstellen

Published Aug 19, 2026 · Updated Sep 3, 2026 · Revision 2 · de-DE

Vendor: n8n Product: n8n Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, serverseitige Request-Forgery-Angriffe (SSRF) durchzuführen, Informationen offenzulegen und Daten zu manipulieren.

Product

n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.

Vulnerabilities 9

  • High 8.7
    CVE-2026-85169

    n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak

    n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input …

    n8n-io n8n
  • High 7.7
    CVE-2026-85168 Public exploit

    n8n before 1.123.73 Remote Code Execution via Git Node

    n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-d…

    n8n-io n8n
  • High 7.2
    CVE-2026-85165

    n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement

    n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals. Authenticated users with workflow-edit permission can muta…

    n8n-io n8n
  • High 7.2
    CVE-2026-85166

    n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node

    n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes that execute an inline sub-workflow (e.g., the Workflow Tool node). A shared-workflow editor, or any user creating/updating a workflow via …

    n8n-io n8n
  • High 7.1
    CVE-2026-85170

    n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes

    n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) and Brevo nodes to the mail composer without verifying it is a string. An authenticated user able to run a workflow can supply an expression that resolves to an object car…

    n8n-io n8n
  • High 7.1
    CVE-2026-85171

    n8n before 1.123.73 Credential Exposure via Error Logging

    n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck nodes. These nodes send their decrypted credentials to the authentication endpoint via the raw legacy HTTP helper outside any error han…

    n8n-io n8n
  • Medium 6.3
    CVE-2026-85167

    n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes

    n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the qu…

    n8n-io n8n
  • Medium 5.3
    CVE-2026-85172

    n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass

    n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exposed to Code and Function nodes. The validation logic checks the uri property for SSRF safety while the underlying HTTP client uses the url…

    n8n-io n8n
  • Medium 5.3
    CVE-2026-85173

    n8n before 2.36.2 Missing Authorization via Insights API

    n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workflow names and execution statistics across projects. Attackers can supply arbitr…

    n8n-io n8n

Revision history

  1. #2

    Referenz(en) aufgenommen: CVE-2026-85173, EUVD-2026-70408, CVE-2026-85172, EUVD-2026-70407, CVE-2026-85171, EUVD-2026-70406, CVE-2026-85170, EUVD-2026-70405, CVE-2026-85169, EUVD-2026-70404, CVE-2026-85168, EUVD-2026-70403, CVE-2026-85167, EUVD-2026-70402, CVE-2026-85166, EUVD-2026-70401, CVE-2026-85165, EUVD-2026-70400

  2. #1

    Initiale Fassung

References