Known vulnerabilities in n8n n8n 2.3.2

Vendor: n8n
Website: https://n8n.io/
Total Security Bulletins: 4

Security bulletins (4)

Secuity bulletin Severity Status Published
SB2026020961: Arbitrary file upload in n8n merge node Medium
Patched
09.02.2026
SB2026020960: Remote code execution in n8n expression evaluation Medium
Patched
09.02.2026
SB2026020671: OS Command Injection in n8n Medium
Patched
06.02.2026
SB2026020670: Time-of-check Time-of-use (TOCTOU) Race Condition in n8n Medium
Patched
06.02.2026