SB2026080552 - Multiple vulnerabilities in n8n

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026080552

SB2026080552 - Multiple vulnerabilities in n8n

Published: August 5, 2026

Security Bulletin ID SB2026080552
CSH Severity
High
Patch available
YES
Number of vulnerabilities 18
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

High 11% Medium 28% Low 61%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 18 vulnerabilities.


1) Improper privilege management (CVE-ID: N/A)

CWE-ID: CWE-269 - Improper Privilege Management

CVSSv4: 7.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to execute arbitrary code.

The vulnerability exists due to improper access control in the JavaScript task runner sandbox when executing user-supplied Code node JavaScript. A remote user can pollute the EventEmitter prototype to execute arbitrary code.

In shared runner deployments, the polluted prototype persists across subsequent Code node executions scheduled on the same runner and can affect other tenants, but not the host.


2) Server-Side Request Forgery (SSRF) (CVE-ID: N/A)

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N]


The vulnerability allows a remote user to disclose sensitive information from internal services.

The vulnerability exists due to improper access control in the SearXNG Agent tool when sending requests to a user-supplied API URL during agent search execution. A remote user can configure a SearXNG credential that points to an internal host and trigger the agent to read internal service responses to disclose sensitive information from internal services.

Only instances with N8N_SSRF_PROTECTION_ENABLED=true are affected, and exploitation requires permission to create SearXNG credentials and configure a personal agent.


3) Command injection (CVE-ID: N/A)

CWE-ID: CWE-77 - Command injection

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to execute arbitrary code.

The vulnerability exists due to improper neutralization of special elements in repository-local git configuration handling in the n8n Git node when processing a repository with crafted local git configuration values. A remote user can plant a malicious repository-local configuration value to execute arbitrary code.

Exploitation requires a separate file-write vulnerability to place the malicious value in the repository's local configuration, and any subsequent Git node operation against that repository triggers execution as the n8n process user.


4) Prototype pollution (CVE-ID: N/A)

CWE-ID: CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')

CVSSv4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to escape the sandbox and access the host's global object.

The vulnerability exists due to improper control of prototype modification in the JavaScript Code node VM sandbox when executing Code node workflows. A remote user can pollute sandbox Function.prototype to recover a reference to the host's globalThis and access the host's global object.

Exploitation requires the ability to create and execute workflows, and the full exploit chain depends on specific modules being available as allowlisted imports in the deployment configuration.


5) Server-Side Request Forgery (SSRF) (CVE-ID: N/A)

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N]


The vulnerability allows a remote user to disclose sensitive information from internal hosts.

The vulnerability exists due to missing domain allowlist enforcement in the /dynamic-node-parameters/options endpoint methodName branch when invoking node loadOptions and listSearch methods using a credential base URL. A remote user can create a credential that points to an internal host and send a crafted request to this endpoint to disclose sensitive information from internal hosts.

The endpoint can be called directly without creating or executing a workflow, and the server returns the fetched response through the autocomplete payload.


6) Resource exhaustion (CVE-ID: N/A)

CWE-ID: CWE-400 - Resource exhaustion

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to cause a denial of service.

The vulnerability exists due to uncontrolled resource consumption in Filter and Switch nodes when processing user-supplied regex patterns. A remote user can configure a specially crafted regex pattern to cause a denial of service.

The affected regex is compiled with new RegExp() and executed synchronously on the worker thread, which can delay other executions on the same worker while the regex runs.


7) Improper access control (CVE-ID: N/A)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to disclose restricted credentials.

The vulnerability exists due to improper access control in the GraphQL node credential selector logic when processing an expression-valued `Authentication` parameter with multiple attached credentials of different types. A remote user can configure the parameter to expression mode and attach at least two credentials of different types to disclose restricted credentials.

The impact is limited to the permissions of the leaked credential.


8) Improper access control (CVE-ID: N/A)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to read and overwrite arbitrary local files on the n8n host.

The vulnerability exists due to improper access control in the Snowflake node when processing free-form Execute Query input. A remote user can submit queries containing client-side commands to read and overwrite arbitrary local files on the n8n host.

Exploitation requires usable Snowflake credentials.


9) Improper Authorization (CVE-ID: N/A)

CWE-ID: CWE-285 - Improper Authorization

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to escalate privileges.

The vulnerability exists due to improper access control in the custom-role deletion reassignment path when handling role deletion requests with a reassignment target. A remote user can delete a custom project role and reassign its holders to the built-in project:admin role to escalate privileges.

Exploitation requires the global role:manageProject scope.


10) Path traversal (CVE-ID: N/A)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to execute arbitrary code.

The vulnerability exists due to path traversal in the @n8n/workflow-sdk node-schema loader when deriving a schema module path from an attacker-supplied node type string. A remote user can supply a crafted node type string to execute arbitrary code.

The code executes in the n8n main process.


11) Information Exposure Through an Error Message (CVE-ID: N/A)

CWE-ID: CWE-209 - Information Exposure Through an Error Message

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to disclose sensitive information.

The vulnerability exists due to improper handling of raw error data in the GraphQL node when processing failed connection-level requests. A remote user can read a stored execution containing the unwrapped HTTP client error to disclose sensitive information.

The persisted error data may include live request headers containing a decrypted credential secret.


12) Input validation error (CVE-ID: N/A)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 8.4 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to execute arbitrary JavaScript in another user's authenticated session.

The vulnerability exists due to improper input validation in the resource-locator field link preview rendering logic when rendering a stored field value into the node type URL template. A remote user can store a malicious value containing expression syntax to execute arbitrary JavaScript in another user's authenticated session.

User interaction is required when another user opens the affected node in the editor.


13) Improper Neutralization of Special Elements in Output Used by a Downstream Component (CVE-ID: N/A)

CWE-ID: CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVSSv4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to disclose sensitive information.

The vulnerability exists due to improper neutralization of special elements in the Edit Image node Draw Text operation when processing crafted text input. A remote user can inject a new MVG primitive to disclose sensitive information.

Exploitation requires the ability to run workflows and can trigger a blind outbound HTTP request to an attacker-chosen address or open an arbitrary local file.


14) Improper access control (CVE-ID: N/A)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to bind a credential from another project to a workflow.

The vulnerability exists due to improper access control in the MCP create_workflow_from_code tool when validating credential references for nodes whose authentication type is set by an expression. A remote user can submit crafted workflow code referencing a credential ID from another project to bind a credential from another project to a workflow.

Exploitation requires MCP to be enabled, a valid MCP Bearer API key, and knowledge of a target credential ID from another project. The runtime execution path still blocks use of the foreign credential, so no credential secret is exposed and no actual requests are made with it.


15) Cross-site scripting (CVE-ID: N/A)

CWE-ID: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]


The vulnerability allows a remote user to execute arbitrary script in a victim's browser.

The vulnerability exists due to improper neutralization of input during web page generation in the Form node completion page when rendering raw HTML with `respondWith` set to `redirect`. A remote user can configure a form response to include crafted HTML and script to execute arbitrary script in a victim's browser.

User interaction is required: a visitor must submit the public form for the script to execute same-origin with their session.


16) SQL injection (CVE-ID: N/A)

CWE-ID: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to disclose sensitive information, modify data, or delete data.

The vulnerability exists due to improper neutralization of special elements in PostgREST filter queries in the Supabase node Row Get Many, Delete, and Update operations when building filter queries with expression-bindable values. A remote attacker can inject a crafted condition to disclose sensitive information, modify data, or delete data.

Exploitation can widen an intended single-row operation to affect every row.


17) Improper Neutralization of Special Elements in Data Query Logic (CVE-ID: N/A)

CWE-ID: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to modify the behavior of database operations and affect the confidentiality, integrity, or availability of downstream systems.

The vulnerability exists due to improper neutralization of special elements in the MongoDB node Query parameter in Find, Delete, and Aggregate operations when processing expressions resolved into JSON queries. A remote attacker can supply data containing MongoDB operators such as $ne or $where to modify the intended query and affect the confidentiality, integrity, or availability of downstream systems.

Exploitation requires a workflow that embeds externally controlled data into the Query field through expression interpolation.


18) Server-Side Request Forgery (SSRF) (CVE-ID: N/A)

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N]


The vulnerability allows a remote user to disclose limited information from internal services.

The vulnerability exists due to improper access control in the OAuth2 credential token exchange flow when processing an authorization-code-to-access-token exchange request. A remote user can configure an access-token URL that points to an internal address and complete the OAuth2 flow to disclose limited information from internal services.

The reflected response is limited to targets that respond usefully to the fixed-shape token-exchange POST request, and the request method, headers, and body are constrained by the OAuth2 exchange fields.


Remediation

Install update from vendor's website.

References