SB2026110511 - Multiple vulnerabilities in n8n

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026110511

SB2026110511 - Multiple vulnerabilities in n8n

Published: November 5, 2026 Updated: November 13, 2026

Security Bulletin ID SB2026110511
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 11
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 82% Low 18%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 11 vulnerabilities.


1) Insertion of Sensitive Information Into Sent Data (CVE-ID: CVE-2026-126390)

CWE-ID: CWE-201 - Insertion of Sensitive Information Into Sent Data

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to obtain the configured NocoDB API token.

The vulnerability exists due to disclosure of credentials to an unvalidated destination in the n8n NocoDB node when downloading attachments from record-supplied URLs with "Download Attachments" enabled. A remote attacker can place a URL pointing to a host they control in an attachment cell they can write to, causing the node to send the configured NocoDB API token to that host when the workflow next executes.


2) Improper isolation or compartmentalization (CVE-ID: CVE-2026-126391)

CWE-ID: CWE-653 - Improper isolation or compartmentalization

CVSSv4: 7.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to execute arbitrary code on the n8n host.

The vulnerability exists due to insufficient isolation in n8n's workflow expression evaluation component when evaluating user-controlled expressions. A remote user can create or modify a workflow containing crafted expressions to escape the evaluation isolation and execute arbitrary code on the host.


3) Code Injection (CVE-ID: CVE-2026-119408)

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows an authenticated attacker to execute arbitrary code in the n8n main process outside task runner isolation.

The vulnerability exists due to insufficient isolation of user code executed through the deprecated Function, Function Item, and LangChain Code workflow nodes. An authenticated attacker with permission to create or modify workflows can place malicious code in these nodes and execute a workflow to run it in the main process.


4) Missing Authentication for Critical Function (CVE-ID: CVE-2026-126382)

CWE-ID: CWE-306 - Missing Authentication for Critical Function

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows an unauthenticated attacker to trigger n8n workflows with forged Asana events and prevent genuine deliveries from being accepted.

The vulnerability exists due to the Asana Trigger accepting a replacement webhook verification secret from any request carrying an X-Hook-Secret header without authentication. An unauthenticated attacker can use a known webhook URL to replace the secret and submit attacker-controlled events that pass signature verification.


5) Input validation error (CVE-ID: CVE-2026-126383)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 7.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote authenticated attacker with low privileges to overwrite unintended MongoDB documents or insert new documents.

The vulnerability exists due to insufficient validation of incoming update key values in the n8n MongoDB node's Update and Find And Replace operations when a workflow passes untrusted input. A remote authenticated attacker with low privileges can submit crafted input through such a workflow to make database operations target documents outside the intended match.


6) Dependency on vulnerable third-party component (CVE-ID: CVE-2026-126384)

CWE-ID: CWE-1395 - Dependency on Vulnerable Third-Party Component

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote authenticated attacker with low privileges to execute arbitrary code on an n8n instance.

The vulnerability exists due to known vulnerabilities in GraphicsMagick components bundled in the official n8n Docker image when the Edit Image node processes untrusted images. A remote authenticated attacker with low privileges can submit a malicious image for processing by that node to trigger code execution.


7) Improper Authentication (CVE-ID: CVE-2026-126385)

CWE-ID: CWE-287 - Improper Authentication

CVSSv4: 8.4 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a low-privileged attacker to impersonate a victim at an OAuth provider through n8n workflows.

The vulnerability exists due to missing authentication binding in the OAuth2 credential callback on Enterprise instances configured with resolvable OAuth2 credentials. A low-privileged attacker with access to such a credential can send its authorization URL to a victim who completes consent without an active n8n session, storing the victim's provider tokens under the attacker's identity.


8) Open redirect (CVE-ID: CVE-2026-126386)

CWE-ID: CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows an unauthenticated remote attacker to redirect visitors from an n8n instance to an arbitrary external destination.

The vulnerability exists due to the default-enabled MCP OAuth registration and authorization endpoints accepting an arbitrary redirect_uri and redirecting visitors before instance checks run. An unauthenticated remote attacker can register an OAuth client and persuade a victim to open a crafted authorization URL, causing the victim's browser to navigate to the attacker-selected destination.


9) External Control of File Name or Path (CVE-ID: CVE-2026-126387)

CWE-ID: CWE-73 - External Control of File Name or Path

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows an authenticated member to read arbitrary files accessible to the n8n server process, including instance configuration files.

The vulnerability exists due to the n8n browser_upload tool accepting absolute paths that are resolved on the server when Browser Use is enabled with N8N_INSTANCE_AI_BROWSER_USE_ENABLED=true. An authenticated member can connect their own browser session and supply a server file path to upload its contents into a page they can access.


10) Insertion of Sensitive Information Into Sent Data (CVE-ID: CVE-2026-126388)

CWE-ID: CWE-201 - Insertion of Sensitive Information Into Sent Data

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows an unauthenticated remote attacker to obtain stored credentials used by n8n workflows.

The vulnerability exists due to credential-using nodes forwarding authentication headers and basic authentication credentials when an authenticated HTTP request follows a redirect to a different origin. An unauthenticated remote attacker can influence a workflow's redirect target through untrusted input or an attacker-controlled endpoint to receive those credentials at an unintended destination.


11) Missing Authentication for Critical Function (CVE-ID: CVE-2026-126389)

CWE-ID: CWE-306 - Missing Authentication for Critical Function

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows an unauthenticated remote attacker to read conversation history or trigger workflows without authenticating to n8n.

The vulnerability exists due to an authentication exemption for the Chat Trigger's setup GET route that also applies to published workflows configured with embedded chat and n8n User Auth. An unauthenticated remote attacker can send a GET request to the chat webhook URL to retrieve a named session's history or submit workflow input.


Remediation

Install update from vendor's website.

References