BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

N8n-io

N8n-io Security Releases - October 2026

n8n-io-2026-10 Oct 1, 2026 Source: Vendor

N8n-io security advisories for October 2026, compiled from CVE.org records.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.cve.org/CVERecord?id=CVE-2026-110840
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

13 lines
All 13 CVEs 13 Additional recognition 0 Unclaimed only
Showing 1–13 of 13
CVE-2026-110840 BR2026-0000-031406 n8n unclaimed
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text wit...
Credited as vonypeto
CVE-2026-110841 BR2026-0000-031407 n8n unclaimed
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint...
Credited as nlgbao1340
CVE-2026-110842 BR2026-0000-031408 n8n unclaimed
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, re...
Credited as sm1ee
CVE-2026-110843 BR2026-0000-031409 n8n unclaimed
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenticated OAuth authorize endpoint, which resolves clients by URL path but stores...
Credited as Masofgon
CVE-2026-110844 BR2026-0000-031410 n8n unclaimed
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows...
Credited as SunKimsroul
CVE-2026-110845 BR2026-0000-031411 n8n unclaimed
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration b...
Credited as tr4ce-ju
CVE-2026-110846 BR2026-0000-031412 n8n unclaimed
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. A...
Credited as n0paew
CVE-2026-110848 BR2026-0000-031413 n8n unclaimed
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as objec...
Credited as vonypeto
CVE-2026-110849 BR2026-0000-031414 n8n unclaimed
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A memb...
Credited as AdamKorcz
CVE-2026-110850 BR2026-0000-031415 n8n unclaimed
n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credenti...
Credited as sm1ee
CVE-2026-110851 BR2026-0000-031416 n8n unclaimed
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested pr...
Credited as sm1ee
CVE-2026-110852 BR2026-0000-031417 n8n unclaimed
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-ge...
Credited as foxmiti
CVE-2026-110853 BR2026-0000-031418 n8n unclaimed
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON...
Credited as tr4ce-ju