Executive brief
n8n is a workflow automation platform that allows users to create and execute complex automation sequences. An authenticated user with workflow creation permissions can exploit a prototype pollution vulnerability in the XML Node to achieve remote code execution on the n8n server, potentially compromising the entire workflow automation platform and any data it processes.
Technical details
The vulnerability is a prototype pollution flaw (CWE-1321) in n8n's XML Node that allows authenticated users to inject malicious code into JavaScript object prototypes. An attacker with permission to create or modify workflows can trigger the prototype pollution, which becomes exploitable for remote code execution when combined with other nodes that reference the polluted prototypes. The attack requires authentication and workflow modification permissions but no user interaction. Patches are available in n8n versions 1.123.32, 2.17.4, and 2.18.1 or later.
Affected products
- n8n n8n before 1.123.32, 2.17.0 before 2.17.4, 2.18.0 before 2.18.1
Timeline
- 2026-04-29: disclosed
- 2026-04-22: advisory
- 2026-04-29: patched: Patches released in versions 1.123.32, 2.17.4, and 2.18.1