These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The n8n workflow automation tool contains a credential exposure vulnerability in versions before 1.123.64, 2.29.8, and 2.30.1. When configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field. This field is intended only for a key identifier. Because JWT headers are Base64-encoded rather than encrypted, the private key could be recovered by an [truncated]
CVE-2026-65598 is a high-severity vulnerability in n8n, a workflow automation tool. It allows authenticated users to bypass path restrictions and execute JavaScript on the server by exploiting a time-of-check-to-time-of-use (TOCTOU) race condition in the Git node's clone operation. This vulnerability affects n8n versions before 1.123.64, 2.29.8, and 2.30.1. The vulnerability has a CVSS score of 8.9 and is [truncated]
CVE-2026-65597 is a DOM-based cross-site scripting vulnerability in the HTML preview of n8n, a workflow automation tool. The vulnerability allows injected script to execute same-origin as the editor. When a victim opens the preview, the script can call authenticated APIs using the victim's session. An account with global:member privileges can exploit the issue. The vulnerability has a CVSS score of 8.2 an [truncated]
n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the 'Allowed HTTP Request Domains' restriction on HTTP-based credentials in the GraphQL node, allowing an authenticated user to exfiltrate restricted credentials by pointing the node's endpoint at a server they control. This vulnerability affects instances with configured 'Allowed HTTP Request Domains' for credentials and non-owner user access. The [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-22T12:18:19.527Z and has not been modified since then. The vulnerability affects n8n workflow automation tool, especially those with MCP Server Trigger workflows configured with n8n OAuth2 authentication. User and project isolation can be broken, allowing an attacker to execute workflows in the owne [truncated]
CVE-2026-65592 is a high-severity vulnerability in n8n, a workflow automation tool. The vulnerability is a stored DOM cross-site scripting (XSS) issue in the Resource Locator component. An attacker with workflow creation or editing privileges can craft a malicious workflow that executes a payload in the victim's browser when interacted with. This vulnerability exists due to the cachedResultUrl parameter b [truncated]
The n8n workflow automation tool has a critical vulnerability, CVE-2026-65590, allowing unrestricted access to the host filesystem and network on Linux and Windows systems. This issue arises from the lack of shell sandbox restrictions in the @n8n/computer-use package, which was only enforced on macOS. The vulnerability affects deployments where the @n8n/computer-use package is explicitly installed and run [truncated]
n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data. This oversight results in the writing of plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in the database and can be exported. The vulnerability has a CVSS score of 5.1 an [truncated]
CVE-2026-65016 is a high-severity privilege escalation vulnerability in n8n versions before 1.123.64, 2.29.8, and 2.30.1. The vulnerability exists in the Enterprise SSO instance-role provisioning feature, which maps an IdP-asserted role claim to an n8n global role without preventing assignment of the global:owner role. This allows an SSO-authenticated user to gain full administrative control over workflow [truncated]
A high-severity privilege escalation vulnerability was discovered in n8n versions before 2.30.1. The vulnerability exists in the AI Agents feature, where the node-execution tool lacks proper authorization checks. A Project Viewer user can exploit this vulnerability by chatting with an agent that has node tools enabled, allowing them to execute arbitrary nodes and access credential secrets without proper a [truncated]
CVE-2026-65014 is an authentication bypass vulnerability in n8n before 2.28.0 that allows unauthenticated network callers to cancel active test webhook registrations given a workflow ID. The impact is limited to disrupting in-progress test sessions; production webhooks, persistent workflow state, and stored data are not affected. This issue affects users of n8n before version 2.28.0 (and before 2.27.4 on [truncated]
The CVE-2026-59208 vulnerability is a high-severity issue affecting n8n, an open-source workflow automation platform. Prior to versions 2.27.4 and 2.28.1, n8n instances configured with multiple trusted token-exchange issuers were vulnerable to authentication bypass. An attacker with a valid token from one trusted issuer could authenticate as a victim under another issuer if the JWT sub claim matched. This [truncated]
CVE-2026-54306 is a medium-severity vulnerability in n8n, an open-source workflow automation platform. A prototype pollution vulnerability allowed a crafted public webhook payload to inject attacker-controlled fields into workflow data during internal object copying. These fields could be surfaced and consumed as normal values by downstream built-in nodes. Where a workflow combines a public webhook with a [truncated]
CVE-2026-54305 is a high-severity vulnerability in n8n's Dynamic Credentials feature. Prior to versions 1.123.55, 2.25.7, and 2.26.2, three EE endpoints accepted any authenticated n8n session without performing per-resource ownership or scope checks. This allowed an authenticated user to enumerate credential identifiers, names, and types referenced by any private workflow, initiate an OAuth authorization [truncated]
CVE-2026-54304 is a high-severity vulnerability in n8n, an open-source workflow automation platform. An authenticated user with permission to create or modify workflows and access to a SecurityScorecard credential with limited allowed domains could configure the SecurityScorecard node's report download operation to target an attacker-controlled URL. The node attached the SecurityScorecard API token to the [truncated]
CVE-2026-54301 is a high-severity vulnerability in n8n, an open-source workflow automation platform. An authenticated user with workflow edit access could serve binary content with an attacker-controlled Content-Type using a Respond to Webhook node. The binary response path bypassed the central Content-Security-Policy sandbox header, allowing a public webhook to execute JavaScript in the n8n origin when v [truncated]
CVE-2026-49444 is a high-severity vulnerability in the n8n workflow automation platform. An authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in versions 1.123.48, 2.21.8, and 2.22.4. The vulnerability has a CVSS score of 7.1 and is considered [truncated]
CVE-2026-45732 is a high-severity vulnerability in n8n, an open-source workflow automation platform. The vulnerability affects OAuth1 and OAuth2 credential reconnect endpoints, allowing an authenticated user with read-only access to a shared credential to initiate an OAuth reconnect flow and overwrite the stored token material for that credential with tokens bound to an external account they control. This [truncated]
CVE-2026-54314 is a vulnerability in the n8n workflow automation platform that allows for memory exhaustion via the Compression node's Decompress operation. Prior to version 2.24.0, an unauthenticated attacker could send a small compressed archive to a public webhook workflow using this node, causing the n8n process to terminate due to memory exhaustion and disrupting all workflows in the same instance. T [truncated]
CVE-2026-54313 is a medium-severity vulnerability in n8n, an open-source workflow automation platform. An authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace operation. The value was not validated before being passed to MongoDB as a query filter, allowing unintended documents to be matched and overwritten with attacker-controlled conten [truncated]
CVE-2026-54310 is a SQL injection vulnerability in n8n, an open-source workflow automation platform. Authenticated users with workflow creation or modification permissions could inject and execute arbitrary SQL against the connected database within the privileges of the configured database account. This issue affects n8n versions prior to 2.25.7 and 2.26.2. The vulnerability has been fixed in versions 2.2 [truncated]
The n8n workflow automation platform has a high-severity vulnerability, CVE-2026-54309, with a CVSS score of 8.8. The vulnerability exists in the @n8n/mcp-browser component when run in HTTP transport mode, allowing unauthenticated access to browser-control capabilities. This could enable an attacker to navigate, evaluate JavaScript, and access cookies and storage against the user's real browser profile. T [truncated]
CVE-2026-54303 is a reflected Cross-Site Scripting (XSS) vulnerability in the n8n workflow automation platform. An endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response without proper sanitization or Content-Security-Policy headers. This allows an attacker to inject malicious scripts when a logged-in user visits a crafted URL. The vulnerability has a CVSS [truncated]
CVE-2026-27577 is a critical vulnerability in the n8n workflow automation platform that allows authenticated users to execute system commands on the host. The issue was patched in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate all known vulnerabilities. This vulnerability has a high impact on the confidentiality, integrity, and availability of [truncated]