n8n vulnerabilities

Newest CVEs

• CVE-2026-59259

  n8n - Permission Bypass via Expression Parser Mismatch in External Secrets

  n8n · n8n

  Medium6.0
• CVE-2026-59254

  n8n - External Secrets Disclosure via Workflow Node Expressions

  n8n · n8n

  Medium6.3
• CVE-2026-56353

  n8n - Authentication Bypass in Chat Trigger Node

  n8n · n8n

  Medium6.3
• CVE-2026-56352

  n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter

  n8n · n8n

  Medium5.3
• CVE-2026-56349

  n8n - Guardrail Node Bypass via Crafted Input

  n8n · n8n

  Medium6.3
• CVE-2026-58661

  n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint

  n8n · n8n

  Medium5.3
• CVE-2026-56354

  n8n - Cross-Site Scripting and Open Redirect in Form Node

  n8n · n8n

  Medium5.1
• CVE-2026-59257

  n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation

  n8n · n8n

  Medium5.3
• CVE-2026-59253

  n8n - Improper Authorization in Workflow Assignment to Folders

  n8n · n8n

  Medium5.3
• CVE-2026-56778

  n8n - Authorization Bypass in Public API Execution Retry Endpoint

  n8n · n8n

  Medium5.3