CVE-2026-110848 n8n-io CVE debrief

Who should care

Defenders of n8n instances, particularly those with authenticated API access, should assess exposure and prioritize updating to a fixed version. This includes reviewing instance configurations, restricting API access, and monitoring instances for disruptions. Security teams should also review compensating controls for exposed systems and conduct an exposure review for affected assets.

Why it matters

Defenders should care about this vulnerability as it allows authenticated users to pollute the global object prototype, disrupting the instance. Updating to a fixed version is crucial to prevent potential disruptions.

• Disruption of n8n instances until restart
• Potential for authenticated users to create malicious nodes

Technical summary

n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder. The vulnerability allows authenticated users to create nodes named __proto__ through the API and invoke the connect-nodes operation to pollute the global object prototype, disrupting the instance until restart. The vulnerability merges workflow connections using node names as object members without checking for reserved keys. This issue can be mitigated by updating to a fixed version.

Defensive priority

Authenticated users can create nodes named __proto__ through the API and invoke the connect-nodes operation to pollute the global object prototype, disrupting the instance until restart.

Recommended defensive actions

• Review and update n8n instances to version 1.123.83, 2.41.4, or 2.42.1
• Restrict API access to authenticated users
• Monitor instances for disruptions
• Implement compensating controls for exposed systems
• Conduct an exposure review for affected assets
• Track exceptions and retest remediated assets
• Review relevant monitoring, detection, and logs for exposed assets

Evidence notes

The CVE Program record and NVD vulnerability detail provide information on the vulnerability. The source item and supplemental sources provide additional context. The vulnerability has been verified through source-provided information and may affect n8n instances with authenticated API access. Defenders should verify instance configurations and update to a fixed version.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.