CVE-2026-56349: n8n - Guardrail Node Bypass via Crafted Input

Q: What is the severity of CVE-2026-56349?

CVE-2026-56349 has a medium severity rating of 6.3 according to the CVSS score.

Q: How do I fix CVE-2026-56349?

To fix CVE-2026-56349, users should upgrade to n8n version 2.10.0 or later.

Q: What type of vulnerability is CVE-2026-56349?

CVE-2026-56349 is an input validation vulnerability in the Guardrail node of n8n.

Q: What can attackers do with CVE-2026-56349?

Attackers can use CVE-2026-56349 to bypass default guardrail instructions and compromise workflow integrity.

Q: What software is affected by CVE-2026-56349?

CVE-2026-56349 affects n8n versions prior to 2.10.0.

Published Jul 15, 2026

Updated

n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malicious inputs to circumvent guardrail protections and compromise workflow integrity.

Affected Software

1 affected component

n8n n8n<2.10.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade n8n to a version that resolves this vulnerability.
Fixed in 2.10.0

Event History

Jul 15, 2026

CVE Published

via MITRE·11:25 AM

Data Sourced

via MITRE·11:25 AM

DescriptionWeakness

Data Sourced

via NVD·12:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-56349?

CVE-2026-56349 has a medium severity rating of 6.3 according to the CVSS score.

How do I fix CVE-2026-56349?

To fix CVE-2026-56349, users should upgrade to n8n version 2.10.0 or later.

What type of vulnerability is CVE-2026-56349?

CVE-2026-56349 is an input validation vulnerability in the Guardrail node of n8n.

What can attackers do with CVE-2026-56349?