DeutschShown in its original language — a full translation is planned for a future version.
n8n: Mehrere Schwachstellen
view advisory published 2026-09-29
Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, um Informationen offenzulegen oder zu manipulieren, sowie um einen Denial of Service herbeizuführen.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-110853US | — | — | ||
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-wor… | ||||
| CVE-2026-110852US | —OT elevated | — | ||
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignor… | ||||
| CVE-2026-110851US | — | — | ||
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against… | ||||
| CVE-2026-110850US | —OT elevated | — | ||
n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only… | ||||
| CVE-2026-110849US | — | — | ||
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin… | ||||
| CVE-2026-110847US | — | — | ||
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in the Chat Trigger hosted-chat page, where insufficiently san… | ||||
| CVE-2026-110846US | — | — | ||
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node… | ||||
| CVE-2026-110845US | — | — | ||
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local gi… | ||||
| CVE-2026-110844US | —OT elevated | — | ||
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inl… | ||||
| CVE-2026-110843US | — | — | ||
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenticated OAuth authorize endpoint, which resolves clients by UR… | ||||
| CVE-2026-110842US | — | — | ||
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the… | ||||
| CVE-2026-110841US | — | — | ||
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the sus… | ||||
| CVE-2026-110840US | — | — | ||
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly… | ||||
02
references
External citations — patches, advisories, analysis.
- n8n Releases vom 2026-09-29external
- GitHub Security Advisory GHSA-29xw-66fq-4xc3 vom 2026-09-29external
- GitHub Security Advisory GHSA-2r5r-xgvc-rj4p vom 2026-09-29external
- GitHub Security Advisory GHSA-3qcw-p65v-c7vq vom 2026-09-29external
- GitHub Security Advisory GHSA-4c7j-qff5-r9cx vom 2026-09-29external
- GitHub Security Advisory GHSA-5jr4-xmvf-frmj vom 2026-09-29external
- GitHub Security Advisory GHSA-5qpp-pqww-h7fp vom 2026-09-29external
- GitHub Security Advisory GHSA-728h-pmr2-7cgh vom 2026-09-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan