n8n-io vulnerabilities

CVEs per yearBy the year they were published

1. 202513
2. 2026193

Known exploitedNewest addition to KEV first

• CVE-2025-68613

  n8n Vulnerable to Remote Code Execution via Expression Injection

  n8n-io · n8n

  ExploitedCritical10.0

Newest CVEs

• CVE-2026-119557

  n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node

  n8n-io · n8n

  High8.2
• CVE-2026-119408

  n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

  n8n-io · n8n

  High8.7
• CVE-2026-118679

  n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger

  n8n-io · n8n

  Medium6.9
• CVE-2026-118678

  n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction

  n8n-io · n8n

  High7.1
• CVE-2026-118677

  n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance

  n8n-io · n8n

  Medium5.9
• CVE-2026-118676

  n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass

  n8n-io · n8n

  Medium5.1
• CVE-2026-118675

  n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow

  n8n-io · n8n

  Medium5.1
• CVE-2026-118649

  n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables

  n8n-io · n8n

  High8.7
• CVE-2026-118648

  n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy

  n8n-io · n8n

  High8.4
• CVE-2026-118647

  n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data

  n8n-io · n8n

  Medium5.3