Skip to content
OpenAdvisories

Vendor

n8n-io

217 known vulnerabilities.

Products

n8n 217
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-126388

    n8n before 2.46.1 Credential Leak via Cross-Origin Redirects in Nodes

    n8n before 2.46.1 contains a credential exposure vulnerability that forwards Authorization headers and basic auth credentials on cross-origin redirects because sendCredentialsOnCrossOriginRedirect defaults to true. Attackers controlling a redirect target or a…

    n8n-io n8n
  • Low 2.3
    CVE-2026-77069

    n8n before 1.123.69 SSRF Protection Bypass via OAuth2

    n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-to-access-token exchange. While OAuth2 discovery and dynamic-client-registration requests use n8n's SSRF-protected HTTP client, the token ex…

    n8n-io n8n