These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-11T13:19:07.490Z and has not been modified since then. The NVD entry is currently Awaiting Analysis. This vulnerability affects n8n versions before 2.32.1, specifically in multiple AI and LLM nodes where the Allowed HTTP Request Domains allowlist is not enforced. Low-privileged workflow editors with [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-11T13:19:07.353Z and has not been modified since then. The NVD entry is currently Undergoing Analysis. This CVE affects n8n versions before 1.123.67, which contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations. Authenticated users with workflow create/execute [truncated]
CVE-2026-72769 is a prototype pollution vulnerability in n8n's VM expression engine. An authenticated user can create or edit a workflow expression to obtain a reference to a host built-in and pollute its prototype, leading to a denial of service. Self-hosted and cloud instances running the VM expression engine are affected. The vulnerability allows an attacker to manipulate the prototype of a host built- [truncated]
The CVE-2026-72768 vulnerability in n8n versions before 2.32.1 allows authenticated users to bypass server-side request forgery (SSRF) protections in the MCP Client node. This is achieved by crafting workflows that send requests to internal or blocked hosts without routing through SSRF protection. As a result, internal services may be exposed, and responses can be read back through the workflow. The vulne [truncated]
CVE-2026-72767 is a remote code execution vulnerability in n8n's Git node, affecting authenticated users with workflow creation and execution rights. The vulnerability allows staging a crafted local repository to execute arbitrary commands as the n8n process user. Both self-hosted and cloud instances are impacted. This vulnerability has significant implications for defenders, as it can lead to potential e [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-11T13:19:06.807Z and has not been modified since then. The NVD entry is currently Awaiting Analysis. The Send Email node in n8n versions before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contains a type confusion vulnerability. This vulnerability occurs because the node does not enforce t [truncated]
The CVE-2026-72765 vulnerability is a sandbox escape issue in n8n versions before 2.31.5 and 2.32.1. An authenticated user with workflow creation or modification permissions can craft expressions using arrow-function bodies to bypass the expression sandbox, leading to system command execution on the host. This issue has a high severity with a CVSS score of 8.7. The vulnerability is addressed in versions 2 [truncated]
A vulnerability in n8n's JavaScript task runner allows a user to poison a cached module, affecting other users' Code-node executions on the same runner. This issue impacts confidentiality, integrity, or availability in multi-user instances with built-in or external modules enabled. The vulnerability is a cross-user isolation break within a single n8n instance and does not constitute a sandbox escape or re [truncated]
An authenticated user able to run workflows on n8n instances before versions 1.123.67, 2.31.5, and 2.32.1 can exploit an arbitrary file write vulnerability in the Edit Image node. This node passes its output format parameter to the underlying image library without validation, allowing a crafted format value to write arbitrary files outside the node's working directory.
The CVE-2026-72750 vulnerability affects n8n versions before 1.123.67, 2.31.5, and 2.32.1. It is caused by the Snowflake node's Execute Query operation interpolating expression values directly into the SQL string, allowing for SQL injection when workflow authors embed untrusted, externally-controlled expression data directly in a raw SQL query. The fix involves adding an optional 'Query Parameters' field [truncated]
The n8n workflow automation tool contains a prototype pollution vulnerability in the Edit Fields (Set) node, which allows an authenticated user to corrupt a shared global in the main Node.js process. This corruption causes the instance to fail every authenticated request, resulting in an instance-wide denial of service for all users until the process is restarted. The vulnerability affects n8n versions be [truncated]
The n8n workflow automation tool contains a credential exposure vulnerability in versions before 1.123.64, 2.29.8, and 2.30.1. When configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field. This field is intended only for a key identifier. Because JWT headers are Base64-encoded rather than encrypted, the private key could be recovered by an [truncated]
CVE-2026-65598 is a high-severity vulnerability in n8n, a workflow automation tool. It allows authenticated users to bypass path restrictions and execute JavaScript on the server by exploiting a time-of-check-to-time-of-use (TOCTOU) race condition in the Git node's clone operation. This vulnerability affects n8n versions before 1.123.64, 2.29.8, and 2.30.1. The vulnerability has a CVSS score of 8.9 and is [truncated]
CVE-2026-65597 is a DOM-based cross-site scripting vulnerability in the HTML preview of n8n, a workflow automation tool. The vulnerability allows injected script to execute same-origin as the editor. When a victim opens the preview, the script can call authenticated APIs using the victim's session. An account with global:member privileges can exploit the issue. The vulnerability has a CVSS score of 8.2 an [truncated]
n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the 'Allowed HTTP Request Domains' restriction on HTTP-based credentials in the GraphQL node, allowing an authenticated user to exfiltrate restricted credentials by pointing the node's endpoint at a server they control. This vulnerability affects instances with configured 'Allowed HTTP Request Domains' for credentials and non-owner user access. The [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-22T12:18:19.527Z and has not been modified since then. The vulnerability affects n8n workflow automation tool, especially those with MCP Server Trigger workflows configured with n8n OAuth2 authentication. User and project isolation can be broken, allowing an attacker to execute workflows in the owne [truncated]
CVE-2026-65592 is a high-severity vulnerability in n8n, a workflow automation tool. The vulnerability is a stored DOM cross-site scripting (XSS) issue in the Resource Locator component. An attacker with workflow creation or editing privileges can craft a malicious workflow that executes a payload in the victim's browser when interacted with. This vulnerability exists due to the cachedResultUrl parameter b [truncated]
The n8n workflow automation tool has a critical vulnerability, CVE-2026-65590, allowing unrestricted access to the host filesystem and network on Linux and Windows systems. This issue arises from the lack of shell sandbox restrictions in the @n8n/computer-use package, which was only enforced on macOS. The vulnerability affects deployments where the @n8n/computer-use package is explicitly installed and run [truncated]
n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data. This oversight results in the writing of plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in the database and can be exported. The vulnerability has a CVSS score of 5.1 an [truncated]
CVE-2026-65016 is a high-severity privilege escalation vulnerability in n8n versions before 1.123.64, 2.29.8, and 2.30.1. The vulnerability exists in the Enterprise SSO instance-role provisioning feature, which maps an IdP-asserted role claim to an n8n global role without preventing assignment of the global:owner role. This allows an SSO-authenticated user to gain full administrative control over workflow [truncated]
A high-severity privilege escalation vulnerability was discovered in n8n versions before 2.30.1. The vulnerability exists in the AI Agents feature, where the node-execution tool lacks proper authorization checks. A Project Viewer user can exploit this vulnerability by chatting with an agent that has node tools enabled, allowing them to execute arbitrary nodes and access credential secrets without proper a [truncated]
CVE-2026-65014 is an authentication bypass vulnerability in n8n before 2.28.0 that allows unauthenticated network callers to cancel active test webhook registrations given a workflow ID. The impact is limited to disrupting in-progress test sessions; production webhooks, persistent workflow state, and stored data are not affected. This issue affects users of n8n before version 2.28.0 (and before 2.27.4 on [truncated]
The CVE-2026-59208 vulnerability is a high-severity issue affecting n8n, an open-source workflow automation platform. Prior to versions 2.27.4 and 2.28.1, n8n instances configured with multiple trusted token-exchange issuers were vulnerable to authentication bypass. An attacker with a valid token from one trusted issuer could authenticate as a victim under another issuer if the JWT sub claim matched. This [truncated]
CVE-2026-54306 is a medium-severity vulnerability in n8n, an open-source workflow automation platform. A prototype pollution vulnerability allowed a crafted public webhook payload to inject attacker-controlled fields into workflow data during internal object copying. These fields could be surfaced and consumed as normal values by downstream built-in nodes. Where a workflow combines a public webhook with a [truncated]
CVE-2026-54305 is a high-severity vulnerability in n8n's Dynamic Credentials feature. Prior to versions 1.123.55, 2.25.7, and 2.26.2, three EE endpoints accepted any authenticated n8n session without performing per-resource ownership or scope checks. This allowed an authenticated user to enumerate credential identifiers, names, and types referenced by any private workflow, initiate an OAuth authorization [truncated]
CVE-2026-54304 is a high-severity vulnerability in n8n, an open-source workflow automation platform. An authenticated user with permission to create or modify workflows and access to a SecurityScorecard credential with limited allowed domains could configure the SecurityScorecard node's report download operation to target an attacker-controlled URL. The node attached the SecurityScorecard API token to the [truncated]
CVE-2026-54301 is a high-severity vulnerability in n8n, an open-source workflow automation platform. An authenticated user with workflow edit access could serve binary content with an attacker-controlled Content-Type using a Respond to Webhook node. The binary response path bypassed the central Content-Security-Policy sandbox header, allowing a public webhook to execute JavaScript in the n8n origin when v [truncated]
CVE-2026-49444 is a high-severity vulnerability in the n8n workflow automation platform. An authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in versions 1.123.48, 2.21.8, and 2.22.4. The vulnerability has a CVSS score of 7.1 and is considered [truncated]
CVE-2026-45732 is a high-severity vulnerability in n8n, an open-source workflow automation platform. The vulnerability affects OAuth1 and OAuth2 credential reconnect endpoints, allowing an authenticated user with read-only access to a shared credential to initiate an OAuth reconnect flow and overwrite the stored token material for that credential with tokens bound to an external account they control. This [truncated]
CVE-2026-54314 is a vulnerability in the n8n workflow automation platform that allows for memory exhaustion via the Compression node's Decompress operation. Prior to version 2.24.0, an unauthenticated attacker could send a small compressed archive to a public webhook workflow using this node, causing the n8n process to terminate due to memory exhaustion and disrupting all workflows in the same instance. T [truncated]