Executive brief
n8n is a workflow automation tool used to connect different software applications and automate business processes. A security flaw in its 'Guardrail' component allows users to bypass safety instructions and restrictions intended to govern how workflows behave. This could allow an attacker to manipulate automated tasks, potentially leading to unauthorized actions or the processing of malicious data within the company's automated workflows.
Technical details
An improper input validation vulnerability (CWE-20) exists in the n8n Guardrail node prior to version 2.10.0. The flaw allows a remote, unauthenticated attacker to bypass security instructions defined within the Guardrail node by providing specially crafted input. While the attack requires certain deployment conditions (Attack Requirements: Present), it does not require specific privileges or user interaction. Successful exploitation enables an attacker to circumvent intended workflow restrictions, potentially impacting the integrity of the automated process. The issue is resolved in version 2.10.0.
Affected products
- n8n n8n < 2.10.0
Timeline
- 2026-02-25: advisory: Initial GitHub security advisory published
- 2026-07-15: disclosed: CVE published to NVD