Vulnerabilities in n8n-io
206 resultsCVE-2026-27495CRITICALn8n has a Sandbox Escape in its JavaScript Task RunnerEPSS 0.8%CVE-2026-85168HIGHn8n before 1.123.73 Remote Code Execution via Git NodeEPSS 0.8%CVE-2026-25056CRITICALn8n Arbitrary File Write leading to RCE in n8n Merge NodeEPSS 0.7%CVE-2025-65964CRITICALn8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit HookEPSS 0.7%CVE-2026-72770HIGHn8n before 1.123.67 Path Traversal via Git Node OperationsEPSS 0.7%CVE-2026-65591HIGHn8n before 1.123.64 Sanitizer Bypass Remote Code ExecutionEPSS 0.7%CVE-2026-65595HIGHn8n before 2.29.8 and 2.30.1 Privilege Escalation via Token ExchangeEPSS 0.7%CVE-2026-77084HIGHn8n before 1.123.69 Remote Code Execution via Git Node Configuration ValuesEPSS 0.7%CVE-2026-86083HIGHn8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code ExecutionEPSS 0.7%CVE-2026-59206HIGHn8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project EnumerationEPSS 0.7%CVE-2026-86076HIGHn8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript ExecutionEPSS 0.7%CVE-2026-119408HIGHn8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function NodesEPSS 0.6%CVE-2026-25053CRITICALn8n is Vulnerable to OS Command Injection in Git NodeEPSS 0.6%CVE-2026-77071HIGHn8n before 1.123.69 PostgREST Filter Injection via SupabaseEPSS 0.6%CVE-2026-86075HIGHn8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration EndpointEPSS 0.6%CVE-2026-65015HIGHn8n before 2.30.1 Privilege Escalation via run_node_toolEPSS 0.6%CVE-2026-65014MEDIUMn8n before 2.28.0 Authentication Bypass via test-webhookEPSS 0.6%CVE-2026-86078MEDIUMn8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of ServiceEPSS 0.6%CVE-2026-65590MEDIUMn8n before 2.30.1 Shell Sandbox Bypass on Linux WindowsEPSS 0.6%CVE-2026-25115CRITICALn8n is vulnerable to Python sandbox escapeEPSS 0.6%