Vulnerabilidades en n8n-io
206 resultadosCVE-2026-33722HIGHn8n Has External Secrets Authorization Bypass in Credential SavingEPSS 0.3%CVE-2026-85172MEDIUMn8n before 2.34.1 SSRF via Request Helper URI Validation BypassEPSS 0.3%CVE-2026-42226HIGHn8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key ReplayEPSS 0.3%CVE-2026-86080MEDIUMn8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-OpenEPSS 0.3%CVE-2026-118648HIGHn8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox PolicyEPSS 0.3%CVE-2026-103246HIGHn8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool IntrospectionEPSS 0.3%CVE-2026-118643MEDIUMn8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error DataEPSS 0.3%CVE-2026-118647MEDIUMn8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution DataEPSS 0.3%CVE-2026-25051HIGHn8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSSEPSS 0.3%CVE-2026-42237MEDIUMn8n: SQL Injection in Snowflake and MySQL NodesEPSS 0.3%CVE-2026-33749MEDIUMn8n Vulnerable to XSS via Binary Data Inline HTML RenderingEPSS 0.3%CVE-2026-33751MEDIUMn8n Vulnerable to LDAP Filter Injection in LDAP NodeEPSS 0.2%CVE-2026-65599MEDIUMn8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT HeaderEPSS 0.2%CVE-2026-118646HIGHn8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files NodeEPSS 0.2%CVE-2026-65592HIGHn8n before 1.123.64 Stored DOM XSS via cachedResultUrlEPSS 0.2%CVE-2026-110849HIGHn8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File PreviewEPSS 0.2%CVE-2025-58177MEDIUMn8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameterEPSS 0.2%CVE-2025-61914HIGHn8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe SandboxEPSS 0.2%CVE-2026-65593MEDIUMn8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node ParametersEPSS 0.2%CVE-2026-103259HIGHn8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic CredentialsEPSS 0.2%