N8n

N8n

42 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-27498

  • EPSS 0.44%
  • Veröffentlicht 25.02.2026 22:42:21
  • Zuletzt bearbeitet 04.03.2026 03:33:32

n8n is an open source workflow automation platform. Prior to versions 2.2.0 and 1.123.8, an authenticated user with permission to create or modify workflows could chain the Read/Write Files from Disk node with git operations to achieve remote code ex...

5.4

CVE-2026-27578

Medienbericht
  • EPSS 0.02%
  • Veröffentlicht 25.02.2026 22:40:38
  • Zuletzt bearbeitet 04.03.2026 03:24:40

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could inject arbitrary scripts into pages rendered by the n8n application using dif...

9.9

CVE-2026-27577

Medienbericht
  • EPSS 0.15%
  • Veröffentlicht 25.02.2026 22:19:44
  • Zuletzt bearbeitet 04.03.2026 14:00:14

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, additional exploits in the expression evaluation of n8n have been identified and patched following CVE-2025-68613. An authenticated user with permissio...

8.8

CVE-2026-27497

Medienbericht
  • EPSS 0.07%
  • Veröffentlicht 25.02.2026 22:16:08
  • Zuletzt bearbeitet 04.03.2026 03:35:58

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could leverage the Merge node's SQL query mode to execute arbitrary code and write ...

9.9

CVE-2026-27495

Medienbericht
  • EPSS 0.08%
  • Veröffentlicht 25.02.2026 22:10:04
  • Zuletzt bearbeitet 04.03.2026 03:41:31

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could exploit a vulnerability in the JavaScript Task Runner sandbox to execute arbi...

9.9

CVE-2026-27494

  • EPSS 0.07%
  • Veröffentlicht 25.02.2026 22:08:00
  • Zuletzt bearbeitet 05.03.2026 16:22:42

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the Python Code node to escape the sandbox. The sandbox did not sufficien...

9

CVE-2026-27493

Medienbericht
  • EPSS 0.23%
  • Veröffentlicht 25.02.2026 22:05:00
  • Zuletzt bearbeitet 05.03.2026 16:29:28

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbit...

6.5

CVE-2026-25631

  • EPSS 0.05%
  • Veröffentlicht 06.02.2026 20:34:53
  • Zuletzt bearbeitet 19.02.2026 17:51:02

n8n is an open source workflow automation platform. Prior to 1.121.0, there is a vulnerability in the HTTP Request node's credential domain validation allowed an authenticated attacker to send requests with credentials to unintended domains, potentia...

7.2

CVE-2026-21893

Medienbericht
  • EPSS 0.26%
  • Veröffentlicht 04.02.2026 17:36:51
  • Zuletzt bearbeitet 20.02.2026 17:07:21

n8n is an open source workflow automation platform. From version 0.187.0 to before 1.120.3, a command injection vulnerability was identified in n8n’s community package installation functionality. The issue allowed authenticated users with administrat...

9.9

CVE-2026-25115

Medienbericht
  • EPSS 0.05%
  • Veröffentlicht 04.02.2026 17:16:23
  • Zuletzt bearbeitet 05.02.2026 20:44:21

n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. Thi...