Vulnerabilities in n8n-io

159 results
Vexday analysis

O ecossistema n8n-io acumula 79 CVEs catalogadas, com 23 classificadas como críticas e um volume expressivo de 33 vulnerabilidades surgidas apenas nos últimos 90 dias, sinalizando uma superfície de ataque em expansão acelerada. A taxa de exploração ativa está 2,8× acima da média geral do catálogo CISA KEV, o que indica que, apesar do número absoluto pequeno, as falhas presentes nesse produto atraem atenção real de atores maliciosos de forma desproporcional. O destaque de maior risco é CVE-2025-68613, com score EPSS de 0,9788 — próximo ao teto máximo de probabilidade de exploração —, confirmada em exploração ativa e exigindo atenção imediata de equipes de resposta. O tipo de falha mais prevalente é CWE-79 (Cross-Site Scripting), uma classe de vulnerabilidade que, em plataformas de automação com integrações externas como o n8n, pode ter impacto amplificado por viabilizar comprometimento de fluxos e credenciais encadeadas.

CVE-2025-68613CRITICALn8n Vulnerable to Remote Code Execution via Expression InjectionEPSS 99.0%KEVCVE-2026-21858CRITICALn8n Vulnerable to Unauthenticated File Access via Improper Webhook Request HandlingEPSS 78.4%CVE-2025-68668CRITICALn8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code NodeEPSS 13.2%CVE-2026-21877CRITICALn8n is vulnerable to Remote Code Execution via Arbitrary File WriteEPSS 5.4%CVE-2026-25055HIGHn8n Arbitrary File Write on Remote Systems via SSH NodeEPSS 1.8%CVE-2026-27493CRITICALn8n has Unauthenticated Expression Evaluation via Form NodeEPSS 1.6%CVE-2026-25049CRITICALn8n Has an Expression Escape Vulnerability Leading to RCEEPSS 1.5%CVE-2026-21893CRITICALn8n Vulnerable to Command Injection in Community Package InstallationEPSS 1.4%CVE-2026-27498CRITICALn8n has Arbitrary Command Execution via File Write and Git OperationsEPSS 1.3%CVE-2026-27497CRITICALn8n has Potential Remote Code Execution via Merge NodeEPSS 1.1%CVE-2026-27577CRITICALn8n: Expression Sandbox Escape Leads to RCEEPSS 1.0%CVE-2026-77068HIGHn8n before 2.34.1 Remote Code Execution via Path TraversalEPSS 0.9%CVE-2026-72767HIGHn8n before 1.123.67 Remote Code Execution via Git nodeEPSS 0.9%CVE-2026-85169HIGHn8n before 1.123.73 Remote Code Execution via $fromAI Prototype LeakEPSS 0.9%CVE-2026-33660CRITICALn8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL ModeEPSS 0.9%CVE-2026-72765HIGHn8n before 2.32.1 Remote Code Execution via Expression Sandbox EscapeEPSS 0.9%CVE-2026-85168HIGHn8n before 1.123.73 Remote Code Execution via Git NodeEPSS 0.8%CVE-2026-27495CRITICALn8n has a Sandbox Escape in its JavaScript Task RunnerEPSS 0.8%CVE-2026-72764MEDIUMn8n before 1.123.67 Module Cache Poisoning via Code NodeEPSS 0.8%CVE-2026-86076HIGHn8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript ExecutionEPSS 0.8%