CVE-2026-110848: n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys. Authenticated users can create nodes named proto through the API and invoke the connect-nodes operation to pollute the global object prototype, disrupting the instance until restart.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated n8n user who can use the API to create workflow nodes and invoke the connect-nodes operation can exploit it. The issue is in the AI workflow builder connection merge path.
What does an attacker need to do to trigger the vulnerability?
The attacker creates a node named __proto__ through the API, then invokes the connect-nodes operation. This causes workflow connections to be merged using the reserved key and can pollute the global object prototype.
What is the likely operational impact?
Successful exploitation can disrupt the n8n instance until it is restarted. The provided information describes service disruption through global object prototype pollution.
Which versions need remediation?
Affected versions are n8n releases before 1.123.83, 2.x releases before 2.41.4, and 2.42.x releases before 2.42.1. Upgrade to the applicable fixed release.