DeutschShown in its original language — a full translation is planned for a future version.
n8n: Mehrere Schwachstellen
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Code auszuführen, sich erhöhte Berechtigungen zu verschaffen, Cross-Site-Scripting-Angriffe durchzuführen und vertrauliche Informationen offenzulegen. Über einige dieser Schwachstellen sind weitere Angriffe möglich, wie beispielsweise die Übernahme von Konten, das Hijacking von Sitzungen und die vollständige Kompromittierung des Systems.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-21893US | high7.2 | — | ||
n8n is an open source workflow automation platform. From version 0.187.0 to before 1.120.3, a command injection vulnerability was identified in n8n’s community package installation… | ||||
| CVE-2026-25115US | critical9.9 | — | ||
n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox en… | ||||
| CVE-2026-25056US | high8.8 | — | ||
n8n is an open source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, a vulnerability in the Merge node's SQL Query mode allowed authenticated users with permiss… | ||||
| CVE-2026-25055US | high8.1 | — | ||
n8n is an open source workflow automation platform. Prior to versions 1.123.12 and 2.4.0, when workflows process uploaded files and transfer them to remote servers via the SSH node… | ||||
| CVE-2026-25054US | medium5.4 | — | ||
n8n is an open source workflow automation platform. Prior to versions 1.123.9 and 2.2.1, a Cross-Site Scripting (XSS) vulnerability existed in a markdown rendering component used i… | ||||
| CVE-2026-25053US | critical9.9 | Exploit | ||
n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or m… | ||||
| CVE-2026-25052US | critical9.9 | — | ||
n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to… | ||||
| CVE-2026-25051US | medium5.4 | — | ||
n8n is an open source workflow automation platform. Prior to version 1.123.2, a Cross-Site Scripting (XSS) vulnerability has been identified in the handling of webhook responses an… | ||||
| CVE-2026-25049US | critical9.9 | Exploit | ||
n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted ex… | ||||
| CVE-2025-61917US | — | — | ||
n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe() and Buffer.allocUnsafeSlow() in the task runner allowed u… | ||||
references
External citations — patches, advisories, analysis.
- n8n GitHub vom 2026-02-04external
- n8n GitHub vom 2026-02-04external
- n8n GitHub vom 2026-02-04external
- n8n GitHub vom 2026-02-04external
- n8n GitHub vom 2026-02-04external
- n8n GitHub vom 2026-02-04external
- n8n GitHub vom 2026-02-04external
- n8n GitHub vom 2026-02-04external
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan