DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
n8n: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-09-02
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebigen Code auszuführen oder einen Denial of Service zu verursachen.
01
beschreibt (16)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-86996US | medium5.4OT erhöht | — | ||
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting named This workflow can be called by was enforced by the Execute Workflow node… | ||||
| CVE-2026-86995US | medium4.3 | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote… | ||||
| CVE-2026-86994US | medium4.3OT erhöht | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to… | ||||
| CVE-2026-86993US | medium4.9OT erhöht | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt w… | ||||
| CVE-2026-86085US | medium4.9OT erhöht | — | ||
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints che… | ||||
| CVE-2026-86084US | medium5.5OT erhöht | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the public OIDC login and callback endpoints completed authentication even when OIDC was… | ||||
| CVE-2026-86083US | high8.8 | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.str… | ||||
| CVE-2026-86082US | medium6.5 | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal cal… | ||||
| CVE-2026-86081US | — | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the… | ||||
| CVE-2026-86080US | medium5.3 | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP… | ||||
| CVE-2026-86079US | medium6.5 | — | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and do… | ||||
| CVE-2026-86078US | medium6.5 | — | ||
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI workflow summary used node names and connection keys from stored workflows as ordina… | ||||
| CVE-2026-86077US | medium6.5OT erhöht | — | ||
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking tha… | ||||
| CVE-2026-86076US | high8.8 | Exploit | ||
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expression compiler sanitizer resolved through dynamically scoped this and did not re… | ||||
| CVE-2026-86075US | high7.5 | — | ||
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirect_uris but accepted arbitrarily large… | ||||
| CVE-2026-86074US | high7.1 | — | ||
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checkin… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- GitHub Security Advisory GHSA-34ff-336r-5q23 vom 2026-09-02external
- GitHub Security Advisory GHSA-35jj-42hp-8gmq vom 2026-09-02external
- GitHub Security Advisory GHSA-5m98-cgcr-xx3q vom 2026-09-02external
- GitHub Security Advisory GHSA-65xw-2v52-jhxc vom 2026-09-02external
- GitHub Security Advisory GHSA-679f-58pq-4v2c vom 2026-09-02external
- GitHub Security Advisory GHSA-6xcw-7xm6-48c6 vom 2026-09-02external
- GitHub Security Advisory GHSA-7hgx-277f-7vmg vom 2026-09-02external
- GitHub Security Advisory GHSA-cqr2-h44g-v75v vom 2026-09-02external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan