Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how n8n compares to other vendors in security performance

View Risk Score →

n8n n8nn8n before 1.123.67 SQL Injection via PostgresTrigger Node

Risk 63
First published (updated )
CVE-2026-72775

n8n n8nn8n before 1.123.67 Authentication Bypass via HTTP Request Node

Risk 51
First published (updated )
CVE-2026-72774

n8n n8nn8n before 2.32.1 Path Traversal via computer-use search_files

Risk 65
First published (updated )
CVE-2026-72773

n8n n8nn8n before 2.32.1 Authentication Bypass via Token Exchange

Risk 66
First published (updated )
CVE-2026-72772

n8n n8nn8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes

Risk 62
First published (updated )
CVE-2026-72771
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

n8n n8nn8n before 1.123.67 Prototype Pollution via VM Expression Engine

Risk 53
First published (updated )
CVE-2026-72769

n8n n8nn8n before 2.32.1 SSRF Protection Bypass via MCP Client

Risk 55
First published (updated )
CVE-2026-72768

n8n n8nn8n before 1.123.67 Remote Code Execution via Git node

Risk 77
First published (updated )
CVE-2026-72767

n8n n8nn8n before 1.123.67 Arbitrary File Read via Send Email Node

Risk 40
First published (updated )
CVE-2026-72766

n8n n8nn8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape

Risk 77
First published (updated )
CVE-2026-72765
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

n8n n8nn8n before 1.123.67 Module Cache Poisoning via Code Node

Risk 44
First published (updated )
CVE-2026-72764

n8n n8nn8n before 1.123.67 Credential Exfiltration via Sub-Workflow

Risk 60
First published (updated )
CVE-2026-72763

n8n n8nn8n before 1.123.67 Arbitrary File Write via Edit Image Node

Risk 55
First published (updated )
CVE-2026-72762

n8n n8nn8n before 1.123.67 SQL Injection via executeQuery Operation

Risk 51
First published (updated )
CVE-2026-72750

n8n n8nn8n before 1.123.67 Prototype Pollution via Edit Fields

Risk 53
First published (updated )
CVE-2026-72749
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

n8n N8n Node.jsn8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

Risk 38
Severity
5.1
First published (updated )
CVE-2026-65599

n8n N8n Node.jsn8n before 1.123.64 Remote Code Execution via Git Clone

Risk 72
Severity
8.9
First published (updated )
CVE-2026-65598

n8n N8n Node.jsn8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe

Risk 52
Severity
8.2
First published (updated )
CVE-2026-65597

n8n N8n Node.jsn8n before 1.123.64 Credential Exfiltration via GraphQL Node

Risk 60
Severity
5.1
First published (updated )
CVE-2026-65596

n8n N8n Node.jsn8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange

Risk 76
Severity
8.9
First published (updated )
CVE-2026-65595
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

n8n N8n Node.jsn8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters

Risk 49
Severity
6.3
First published (updated )
CVE-2026-65593

n8n N8n Node.jsn8n before 2.30.1 Missing OAuth Authorization Check

Risk 38
Severity
5.1
First published (updated )
CVE-2026-65594

n8n N8n Node.jsn8n before 1.123.64 Stored DOM XSS via cachedResultUrl

Risk 61
Severity
8.4
First published (updated )
CVE-2026-65592

n8n N8n Node.jsn8n before 1.123.64 Sanitizer Bypass Remote Code Execution

Risk 76
Severity
8.9
First published (updated )
CVE-2026-65591

n8n N8n Node.jsn8n before 2.30.1 Shell Sandbox Bypass on Linux Windows

Risk 86
Severity
5.5
First published (updated )
CVE-2026-65590
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

n8n N8n Node.jsn8n before 1.123.64 Credential Exposure via LLM Node Execution Data

Risk 38
Severity
5.1
First published (updated )
CVE-2026-65589

n8n N8n Node.jsn8n before 2.30.1 Privilege Escalation via run_node_tool

Risk 79
Severity
7.2
First published (updated )
CVE-2026-65015

n8n N8n Node.jsn8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role

Risk 79
Severity
7.7
First published (updated )
CVE-2026-65016

n8n N8n Node.jsn8n before 2.28.0 Authentication Bypass via test-webhook

Risk 29
Severity
6.3
First published (updated )
CVE-2026-65014

n8n N8n Node.jsn8n - Permission Bypass via Expression Parser Mismatch in External Secrets

Risk 38
Severity
6
First published (updated )
CVE-2026-59259
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203