Description
n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malicious inputs to circumvent guardrail protections and compromise workflow integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| n8n | n8n | < 2.10.0 | 2.10.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | n8n | < 2.10.0 | 2.10.0 | GHSA-fvfv-ppw4-7h2w |
Advisories 2
- NCSC-2026-0248 Kwetsbaarheden verholpen in n8n workflow automation platform NCSC-NL (Netherlands) · Jul 17, 2026
- WID-SEC-2026-0532 n8n: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 15, 2026
References
- GitHub Security Advisory (GHSA-fvfv-ppw4-7h2w) vendor-advisory
- VulnCheck Advisory: n8n - Guardrail Node Bypass via Crafted Input third-party-advisory