DeutschShown in its original language — a full translation is planned for a future version.
n8n: Mehrere Schwachstellen
view advisory published 2026-06-10
Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was weitere Angriffe einschließlich einer Rechteausweitung ermöglichen kann.
01
describes (18)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-56778US | —OT elevated | — | ||
n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workflow:read scope instea… | ||||
| CVE-2026-56776US | —OT elevated | — | ||
n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/new endpoint, which authorizes access using the workflow:read… | ||||
| CVE-2026-56775US | —OT elevated | — | ||
n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing actions using the work… | ||||
| CVE-2026-56777US | — | — | ||
n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security validator bypass in the Python Code node. An authenticated user with permission to create… | ||||
| CVE-2026-54308US | high7.2 | — | ||
n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent365Trigger and StripeTrigger node did not validate that inbound requests. As a res… | ||||
| CVE-2026-54307US | critical9.6OT elevated | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials t… | ||||
| CVE-2026-54306US | medium6.4 | — | ||
n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototype pollution vulnerability allowed a crafted public webhook payload to inject attacker-cont… | ||||
| CVE-2026-54305US | critical9.9 | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n… | ||||
| CVE-2026-54304US | high7.7 | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authenticated user with permission to create or modify workflows and access to a Secur… | ||||
| CVE-2026-54302US | medium5.4 | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could inject arbitrary JavaScript into th… | ||||
| CVE-2026-54301US | medium5.4 | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could configure a Respond to Webhook node… | ||||
| CVE-2026-54314US | high7.5 | — | ||
n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing… | ||||
| CVE-2026-54313US | high7.7 | — | ||
n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Fin… | ||||
| CVE-2026-54312US | high8.5 | — | ||
n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achieve global prototype pollution vi… | ||||
| CVE-2026-54311US | high7.7 | — | ||
n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could pollute the sandbox used b… | ||||
| CVE-2026-54310US | critical9.9 | — | ||
n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameter… | ||||
| CVE-2026-54309US | critical10.0OT elevated | — | ||
n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint accepts session initialization… | ||||
| CVE-2026-54303US | medium5.4 | — | ||
n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response wit… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-2j5h-858j-5mpf vom 2026-06-10external
- GitHub Security Advisory GHSA-2vff-hj5x-8gq7 vom 2026-06-10external
- GitHub Security Advisory GHSA-42h7-m79w-wvg5 vom 2026-06-10external
- GitHub Security Advisory GHSA-664h-gpgq-h6xx vom 2026-06-10external
- GitHub Security Advisory GHSA-9c38-2mcm-q7f7 vom 2026-06-10external
- GitHub Security Advisory GHSA-c37g-w77q-m4vp vom 2026-06-10external
- GitHub Security Advisory GHSA-h3jj-5f3v-3685 vom 2026-06-10external
- GitHub Security Advisory GHSA-h86q-fx34-gfjr vom 2026-06-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan