Skip to content
OpenAdvisories

Vendor

n8n

22 known vulnerabilities.

Products

n8n 22
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.4
    CVE-2026-56776

    n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint

    n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/new endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access…

    n8n n8n n8n npm
  • High 8.8
    CVE-2025-71380

    n8n - Arbitrary Command Execution via Execute Command Node

    The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading to data exfi…

    n8n n8n n8n n8n-nodes-base npm
  • High 8.2
    CVE-2026-56351

    n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes

    n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to inject arbitrary SQL through unescaped identifier values in node configuration parameters. Attackers with workflow…

    n8n n8n n8n npm