n8n: HTTP Request Node Pagination Prototype Pollution to RCE
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.4epss 0.9%
from disclosure to weapon7 days
Published on NVDJun 23
1st PoC+7d
exploitation probability
0.9%top 44% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via an unvalidated pagination parameter in the HTTP Request node. Combined with other techniques this could lead to RCE on the instance. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
n8n-io · n8npublic PoCs found — 1
githubgithub.com/BiiTts/CVE-2026-44789-n8n-PrototypePollution-RCE★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.