# CVE-2026-118648: n8n stored cross-site scripting in webhook responses

Source: https://junglewise.ai/threats/cve-2026-118648-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-28. Updated: 2026-10-28  
License: CC BY 4.0 with a link back

CVE-2026-118648 · Severity: high · CVSS 7.3 · Published 2026-10-28

n8n is a workflow automation platform that connects business applications and data sources through configurable workflows and webhooks. Authenticated users who can create workflows can inject malicious HTML and JavaScript into webhook responses that lack sandbox protections, allowing them to steal session credentials and impersonate other users who access the webhook URL.

Technologies: [N8n](https://junglewise.ai/threats/technologies/n8n). Vendors: [N8n](https://junglewise.ai/threats/vendors/n8n).

## Quick answers

**Is CVE-2026-118648 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-118648 being exploited in the wild.

**How severe is CVE-2026-118648?** High severity, with a CVSS score of 7.3, published 28 October 2026.

**Which products and versions are affected?** N8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1.

**Is there a fix for CVE-2026-118648?** Yes: fixed in 1.123.85, 2.43.5, 2.44.1. Until then: Restrict n8n instance access to fully trusted users only. Audit active webhook workflows and review response bodies for unexpected HTML or script content. Apply network-level controls to restrict access to /webhook/* routes to trusted sources.</anigation>
<parameter name="timeline">[{"kind":"disclosed","at":"2026-10-14"},{"kind":"advisory","at":"2026-10-28"}] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-118648 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-118648?** Check whether you run N8n at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 1.123.85, 2.43.5, 2.44.1

Restrict n8n instance access to fully trusted users only. Audit active webhook workflows and review response bodies for unexpected HTML or script content. Apply network-level controls to restrict access to /webhook/* routes to trusted sources.</anigation>
<parameter name="timeline">[{"kind":"disclosed","at":"2026-10-14"},{"kind":"advisory","at":"2026-10-28"}]

## Technical details

n8n fails to apply sandbox Content-Security-Policy headers to certain webhook response paths including error responses and responses without headers, allowing stored XSS. An authenticated workflow creator can embed malicious scripts that execute in the n8n origin context when another user visits the webhook URL, gaining access to that user's session. The vulnerability requires authenticated user access and user interaction (victim visiting the URL), but affects confidentiality and integrity through session hijacking.

## Affected products

- n8n n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1

## References

- [https://github.com/n8n-io/n8n/security/advisories/GHSA-mp7q-23hg-35cf](https://github.com/n8n-io/n8n/security/advisories/GHSA-mp7q-23hg-35cf)
- [https://www.vulncheck.com/advisories/n8n-before-1.123.85-2.43.5-and-2.44.1-stored-xss-via-webhook-responses-missing-sandbox-policy](https://www.vulncheck.com/advisories/n8n-before-1.123.85-2.43.5-and-2.44.1-stored-xss-via-webhook-responses-missing-sandbox-policy)

## Related threats

- [n8n path traversal in Databricks node](https://junglewise.ai/threats/cve-2026-119557-n8n-from-2-14-0-through-2-46-3-contains-a-path-traversal)
- [n8n remote code execution in deprecated Function nodes](https://junglewise.ai/threats/cve-2026-119408-n8n-before-2-42-6-2-43-x-before-2-43-3-and-3-x-before-3-0-1)
- [n8n Slack Trigger SSRF and token exfiltration](https://junglewise.ai/threats/cve-2026-118679-n8n-before-1-123-83-2-41-4-and-2-42-1-contains-a-server-side)
- [n8n prototype pollution in workflow history compaction](https://junglewise.ai/threats/cve-2026-118678-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-prototype)
- [n8n Local Gateway deep-link missing confirmation re-pairing](https://junglewise.ai/threats/cve-2026-118677-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-missing)