Skip to content
OpenAdvisories
High WID-SEC-2026-3165 18 CVEs

n8n: Mehrere Schwachstellen

Published Sep 2, 2026 · Updated Sep 16, 2026 · Revision 3 · de-DE

Vendor: n8n Product: n8n Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebigen Code auszuführen oder einen Denial of Service zu verursachen.

Product

n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.

Vulnerabilities 18

  • High 8.7
    CVE-2026-86075

    n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint

    n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirect_uris but accepted arbitrarily large client_name and grant_types values. An unauthenticated remote caller could repe…

    n8n-io n8n n8n npm
  • High 8.7
    CVE-2026-86076 Public exploit

    n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expression compiler sanitizer resolved through dynamically scoped this and did not reject reserved class member names. A class field named __sanitize could rebind t…

    n8n-io n8n n8n npm
  • High 7.7
    CVE-2026-86083

    n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.stringify while printing synthetic string literals and interpolating timezone data…

    n8n-io n8n n8n npm
  • High 7.1
    CVE-2026-86081

    n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8N_BLOCK_FILE_PATTERNS regular expression. The pattern ^(./).git(/.)$ …

    n8n-io n8n n8n npm
  • High 7.1
    CVE-2026-86082

    n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.b…

    n8n-io n8n n8n npm
  • Medium 6.3
    CVE-2026-86077

    n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

    n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who rece…

    n8n-io n8n n8n npm
  • Medium 6.3
    CVE-2026-86079

    n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and document identifiers directly into REST request paths. An identifier containing p…

    n8n-io n8n n8n npm
  • Medium 6.3
    CVE-2026-86080

    n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained…

    n8n-io n8n n8n npm
  • Medium 6.0
    CVE-2026-86078

    n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service

    n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI workflow summary used node names and connection keys from stored workflows as ordinary object keys. A workflow submitted through the REST API could contain __proto…

    n8n-io n8n n8n npm
  • Medium 6.0
    CVE-2026-86084

    n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the public OIDC login and callback endpoints completed authentication even when OIDC was not the enabled active authentication method. An Enterprise administrator who h…

    n8n-io n8n n8n npm
  • Medium 5.9
    CVE-2026-86074

    n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content

    n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin. Attacker-controlled fetched conte…

    n8n-io n8n n8n npm
  • Medium 5.9
    CVE-2026-86993

    n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custo…

    n8n-io n8n n8n npm
  • Medium 5.3
    CVE-2026-86994

    n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to any member regardless of sharing. Workflow activation, deactivation, and public…

    n8n-io n8n n8n npm
  • Medium 5.3
    CVE-2026-86995

    n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A l…

    n8n-io n8n n8n npm
  • Medium 5.3
    CVE-2026-86996

    n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy

    n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting named This workflow can be called by was enforced by the Execute Workflow node but not when a workflow was attached to an Agent as a tool. A user able to buil…

    n8n-io n8n n8n npm
  • Medium 5.1
    CVE-2026-86085

    n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints

    n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:man…

    n8n-io n8n n8n npm
  • Medium 5.0
    CVE-2026-92587

    n8n before 1.123.76 Sandbox Escape via Git Relative URL

    n8n is a workflow automation platform. In versions before 1.123.76, 2.37.7, and 2.38.2, the Git node validated a relative remote URL against the configured repositoryPath but then invoked git with that path as its working directory; git walked up to the enclo…

    n8n-io n8n
  • Medium 4.4
    CVE-2026-92588

    n8n before 1.123.76 Improper Authorization via Source Control Push

    n8n is a workflow automation platform. In n8n versions before 1.123.76, 2.37.7, and 2.38.2, the source control push endpoint derived the set of files to push from the file paths and status supplied in the client request payload instead of from the server-side…

    n8n-io n8n

Revision history

  1. #3

    Referenz(en) aufgenommen: CVE-2026-92588, EUVD-2026-81288, CVE-2026-92587, EUVD-2026-81287

  2. #2

    Referenz(en) aufgenommen: CVE-2026-86075, EUVD-2026-74281, CVE-2026-86083, EUVD-2026-74273, CVE-2026-86085, EUVD-2026-74271, CVE-2026-86082, EUVD-2026-74274, CVE-2026-86994, EUVD-2026-74269, CVE-2026-86995, EUVD-2026-74268, CVE-2026-86996, EUVD-2026-74267, CVE-2026-86081, EUVD-2026-74275, CVE-2026-86080, EUVD-2026-74276, CVE-2026-86076, EUVD-2026-74280, CVE-2026-86077, EUVD-2026-74279, CVE-2026-86078, EUVD-2026-74278, CVE-2026-86079, EUVD-2026-74277, CVE-2026-86074, EUVD-2026-73930, CVE-2026-86993, EUVD-2026-74270, CVE-2026-86084, EUVD-2026-74272

  3. #1

    Initiale Fassung

References