{"schema_version":1,"title":"n8n (npm) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 64 vulnerabilities in n8n (npm): 0 in the last 7 days and 14 in the last 90 days, 8 of them critical and 1 exploited in the wild. The most recent, CVE-2026-86996, was published on 8 September 2026. Nothing was published in the last eight weeks.","url":"https://junglewise.ai/threats/technologies/npm-n8n","json_url":"https://junglewise.ai/threats/technologies/npm-n8n.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/npm-n8n","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":28,"all_time":64,"critical":8,"exploited":1,"last_7_days":0,"last_30_days":0,"last_90_days":14,"last_365_days":64},"latest":[{"cve":"CVE-2026-86996","cvss":5.4,"epss":0.0029,"slug":"cve-2026-86996-n8n-agent-workflow-tool-bypasses-sub-workflow-caller-policy","title":"n8n Agent Workflow Tool bypasses Sub-Workflow Caller Policy","severity":"medium","exploited":false,"published_at":"2026-09-08T22:19:18.24+00:00","url":"https://junglewise.ai/threats/cve-2026-86996-n8n-agent-workflow-tool-bypasses-sub-workflow-caller-policy"},{"cve":"CVE-2026-86995","cvss":4.3,"epss":0.0041,"slug":"cve-2026-86995-n8n-git-node-config-bypass-enables-local-repository-read","title":"n8n Git Node config bypass enables local repository read","severity":"medium","exploited":false,"published_at":"2026-09-08T22:19:18.103+00:00","url":"https://junglewise.ai/threats/cve-2026-86995-n8n-git-node-config-bypass-enables-local-repository-read"},{"cve":"CVE-2026-86994","cvss":4.3,"epss":0.0034,"slug":"cve-2026-86994-n8n-missing-authorization-in-active-workflows-endpoint","title":"n8n missing authorization in active workflows endpoint","severity":"medium","exploited":false,"published_at":"2026-09-08T22:19:17.96+00:00","url":"https://junglewise.ai/threats/cve-2026-86994-n8n-missing-authorization-in-active-workflows-endpoint"},{"cve":"CVE-2026-86993","cvss":4.9,"epss":0.0046,"slug":"cve-2026-86993-n8n-log-streaming-credentials-unauthorized-access","title":"n8n log streaming credentials unauthorized access","severity":"medium","exploited":false,"published_at":"2026-09-08T22:19:17.81+00:00","url":"https://junglewise.ai/threats/cve-2026-86993-n8n-log-streaming-credentials-unauthorized-access"},{"cve":"CVE-2026-86085","cvss":4.9,"epss":0.0044,"slug":"cve-2026-86085-n8n-missing-authorization-in-role-assignment-endpoints","title":"n8n missing authorization in role assignment endpoints","severity":"medium","exploited":false,"published_at":"2026-09-08T22:19:17.67+00:00","url":"https://junglewise.ai/threats/cve-2026-86085-n8n-missing-authorization-in-role-assignment-endpoints"},{"cve":"CVE-2026-86084","cvss":5.5,"epss":0.0046,"slug":"cve-2026-86084-n8n-authentication-bypass-via-disabled-oidc-sso-endpoints","title":"n8n authentication bypass via disabled OIDC SSO endpoints","severity":"medium","exploited":false,"published_at":"2026-09-08T22:19:17.527+00:00","url":"https://junglewise.ai/threats/cve-2026-86084-n8n-authentication-bypass-via-disabled-oidc-sso-endpoints"},{"cve":"CVE-2026-86083","cvss":8.8,"epss":0.0066,"slug":"cve-2026-86083-n8n-expression-sandbox-escape-in-legacy-engine-via-json-stringify","title":"n8n expression sandbox escape in legacy engine via JSON.stringify tampering","severity":"high","exploited":false,"published_at":"2026-09-08T22:19:17.383+00:00","url":"https://junglewise.ai/threats/cve-2026-86083-n8n-expression-sandbox-escape-in-legacy-engine-via-json-stringify"},{"cve":"CVE-2026-86081","cvss":4,"epss":0.0056,"slug":"cve-2026-86081-n8n-regular-expression-denial-of-service-in-git-node-file-pattern","title":"n8n regular expression denial of service in Git node file pattern","severity":"high","exploited":false,"published_at":"2026-09-08T22:19:17.093+00:00","url":"https://junglewise.ai/threats/cve-2026-86081-n8n-regular-expression-denial-of-service-in-git-node-file-pattern"},{"cve":"CVE-2026-86079","cvss":6.5,"epss":0.0049,"slug":"cve-2026-86079-n8n-path-injection-in-elasticsearch-and-elasticsecurity-nodes","title":"n8n path injection in Elasticsearch and ElasticSecurity nodes","severity":"medium","exploited":false,"published_at":"2026-09-08T22:19:16.813+00:00","url":"https://junglewise.ai/threats/cve-2026-86079-n8n-path-injection-in-elasticsearch-and-elasticsecurity-nodes"},{"cve":"CVE-2026-86078","cvss":6.5,"epss":0.0059,"slug":"cve-2026-86078-n8n-prototype-pollution-in-workflow-summary","title":"n8n prototype pollution in workflow summary","severity":"medium","exploited":false,"published_at":"2026-09-08T22:19:16.677+00:00","url":"https://junglewise.ai/threats/cve-2026-86078-n8n-prototype-pollution-in-workflow-summary"},{"cve":"CVE-2026-86076","cvss":8.8,"epss":0.0079,"slug":"cve-2026-86076-n8n-expression-sandbox-escape-via-class-field-sanitizer-rebinding","title":"n8n expression sandbox escape via class-field sanitizer rebinding","severity":"high","exploited":false,"published_at":"2026-09-08T22:19:16.387+00:00","url":"https://junglewise.ai/threats/cve-2026-86076-n8n-expression-sandbox-escape-via-class-field-sanitizer-rebinding"},{"cve":"CVE-2026-86075","cvss":7.5,"epss":0.0061,"slug":"cve-2026-86075-n8n-unauthenticated-storage-exhaustion-via-oauth-registration","title":"n8n unauthenticated storage exhaustion via OAuth registration","severity":"high","exploited":false,"published_at":"2026-09-08T22:19:16.25+00:00","url":"https://junglewise.ai/threats/cve-2026-86075-n8n-unauthenticated-storage-exhaustion-via-oauth-registration"},{"cve":"CVE-2026-86074","cvss":7.1,"epss":0.0038,"slug":"cve-2026-86074-n8n-instance-ai-credential-setup-ssrf-via-unvalidated-probe-url","title":"n8n Instance AI credential setup SSRF via unvalidated probe URL","severity":"high","exploited":false,"published_at":"2026-09-08T18:21:14.273+00:00","url":"https://junglewise.ai/threats/cve-2026-86074-n8n-instance-ai-credential-setup-ssrf-via-unvalidated-probe-url"},{"cve":"CVE-2026-86073","cvss":7.6,"epss":0.0039,"slug":"cve-2026-86073-n8n-oauth-consent-bypass-via-unbound-refresh-token","title":"n8n OAuth consent bypass via unbound refresh token","severity":"high","exploited":false,"published_at":"2026-09-08T17:18:39.167+00:00","url":"https://junglewise.ai/threats/cve-2026-86073-n8n-oauth-consent-bypass-via-unbound-refresh-token"},{"cve":"CVE-2026-65599","cvss":4,"epss":0.0025,"slug":"cve-2026-65599-n8n-credential-exposure-in-google-service-account-jwt-header","title":"n8n credential exposure in Google Service Account JWT header","severity":"medium","exploited":false,"published_at":"2026-07-22T12:18:20.167+00:00","url":"https://junglewise.ai/threats/cve-2026-65599-n8n-credential-exposure-in-google-service-account-jwt-header"},{"cve":"CVE-2026-65598","cvss":4,"epss":0.0034,"slug":"cve-2026-65598-n8n-toctou-race-condition-in-git-node-clone-operation","title":"n8n TOCTOU race condition in Git node clone operation","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:20.037+00:00","url":"https://junglewise.ai/threats/cve-2026-65598-n8n-toctou-race-condition-in-git-node-clone-operation"},{"cve":"CVE-2026-65597","cvss":4,"epss":0.003,"slug":"cve-2026-65597-n8n-dom-based-xss-in-html-preview","title":"n8n DOM-based XSS in HTML preview","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:19.913+00:00","url":"https://junglewise.ai/threats/cve-2026-65597-n8n-dom-based-xss-in-html-preview"},{"cve":"CVE-2026-65596","cvss":4,"epss":0.0037,"slug":"cve-2026-65596-n8n-authorization-bypass-in-graphql-node-allows-credential","title":"n8n authorization bypass in GraphQL node allows credential exfiltration","severity":"medium","exploited":false,"published_at":"2026-07-22T12:18:19.79+00:00","url":"https://junglewise.ai/threats/cve-2026-65596-n8n-authorization-bypass-in-graphql-node-allows-credential"},{"cve":"CVE-2026-65595","cvss":4,"epss":0.0069,"slug":"cve-2026-65595-n8n-privilege-escalation-in-token-exchange-module","title":"n8n privilege escalation in Token Exchange module","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:19.66+00:00","url":"https://junglewise.ai/threats/cve-2026-65595-n8n-privilege-escalation-in-token-exchange-module"},{"cve":"CVE-2026-65594","cvss":4,"epss":0.0044,"slug":"cve-2026-65594-n8n-incorrect-authorization-in-oauth-2-1-flow-for-mcp-server","title":"n8n incorrect authorization in OAuth 2.1 flow for MCP Server Triggers","severity":"medium","exploited":false,"published_at":"2026-07-22T12:18:19.527+00:00","url":"https://junglewise.ai/threats/cve-2026-65594-n8n-incorrect-authorization-in-oauth-2-1-flow-for-mcp-server"},{"cve":"CVE-2026-65593","cvss":4,"epss":0.0024,"slug":"cve-2026-65593-n8n-ssrf-in-dynamic-node-parameters-endpoints","title":"n8n SSRF in dynamic-node-parameters endpoints","severity":"medium","exploited":false,"published_at":"2026-07-22T12:18:19.39+00:00","url":"https://junglewise.ai/threats/cve-2026-65593-n8n-ssrf-in-dynamic-node-parameters-endpoints"},{"cve":"CVE-2026-65592","cvss":4,"epss":0.0024,"slug":"cve-2026-65592-n8n-stored-dom-xss-in-resource-locator-component","title":"n8n stored DOM XSS in Resource Locator component","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:19.253+00:00","url":"https://junglewise.ai/threats/cve-2026-65592-n8n-stored-dom-xss-in-resource-locator-component"},{"cve":"CVE-2026-65591","cvss":4,"epss":0.0069,"slug":"cve-2026-65591-n8n-code-execution-via-sanitizer-bypass-in-legacy-expression","title":"n8n code execution via sanitizer bypass in legacy expression evaluator","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:19.117+00:00","url":"https://junglewise.ai/threats/cve-2026-65591-n8n-code-execution-via-sanitizer-bypass-in-legacy-expression"},{"cve":"CVE-2026-65590","cvss":4,"epss":0.0058,"slug":"cve-2026-65590-n8n-missing-shell-sandbox-in-n8n-computer-use-package","title":"n8n missing shell sandbox in @n8n/computer-use package","severity":"medium","exploited":false,"published_at":"2026-07-22T12:18:18.987+00:00","url":"https://junglewise.ai/threats/cve-2026-65590-n8n-missing-shell-sandbox-in-n8n-computer-use-package"},{"cve":"CVE-2026-65589","cvss":4,"epss":0.0048,"slug":"cve-2026-65589-n8n-credential-exposure-in-llm-sub-node-execution-data","title":"n8n credential exposure in LLM sub-node execution data","severity":"medium","exploited":false,"published_at":"2026-07-22T12:18:18.857+00:00","url":"https://junglewise.ai/threats/cve-2026-65589-n8n-credential-exposure-in-llm-sub-node-execution-data"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":14},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"openclaw (npm)","slug":"npm-openclaw","vulnerabilities":214,"url":"https://junglewise.ai/threats/technologies/npm-openclaw"},{"name":"flowise (npm)","slug":"flowise","vulnerabilities":133,"url":"https://junglewise.ai/threats/technologies/flowise"},{"name":"parse-server (npm)","slug":"parse-server","vulnerabilities":117,"url":"https://junglewise.ai/threats/technologies/parse-server"},{"name":"vm2 (npm)","slug":"vm2","vulnerabilities":111,"url":"https://junglewise.ai/threats/technologies/vm2"},{"name":"electron (npm)","slug":"electron","vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/electron"},{"name":"ghost (npm)","slug":"ghost","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/ghost"},{"name":"hono (npm)","slug":"hono","vulnerabilities":62,"url":"https://junglewise.ai/threats/technologies/hono"},{"name":"directus (npm)","slug":"directus","vulnerabilities":61,"url":"https://junglewise.ai/threats/technologies/directus"},{"name":"nocodb (npm)","slug":"nocodb","vulnerabilities":54,"url":"https://junglewise.ai/threats/technologies/nocodb"},{"name":"undici (npm)","slug":"undici","vulnerabilities":53,"url":"https://junglewise.ai/threats/technologies/undici"},{"name":"@budibase/server (npm)","slug":"budibase-server","vulnerabilities":42,"url":"https://junglewise.ai/threats/technologies/budibase-server"},{"name":"apostrophe (npm)","slug":"apostrophe","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/apostrophe"}],"technology":{"hub":true,"name":"n8n (npm)","slug":"npm-n8n","vendor":{"hub":true,"name":"npm","slug":"npm","url":"https://junglewise.ai/threats/vendors/npm"},"aliases":[],"description":"Open-source workflow automation and task orchestration platform.","url":"https://junglewise.ai/threats/technologies/npm-n8n"},"most_severe":[{"cve":"CVE-2025-68613","cvss":9.9,"epss":0.9899,"slug":"cve-2025-68613-n8n-remote-code-execution-in-workflow-expression-evaluation","title":"n8n Vulnerable to Remote Code Execution via Expression Injection","severity":"critical","exploited":true,"published_at":"2025-12-19T23:15:52.083+00:00","url":"https://junglewise.ai/threats/cve-2025-68613-n8n-remote-code-execution-in-workflow-expression-evaluation"},{"cve":"CVE-2026-54309","cvss":10,"epss":0.0055,"slug":"cve-2026-54309-n8n-missing-authentication-in-mcp-browser-http-transport","title":"n8n missing authentication in MCP Browser HTTP transport","severity":"critical","exploited":false,"published_at":"2026-06-23T16:17:01.86+00:00","url":"https://junglewise.ai/threats/cve-2026-54309-n8n-missing-authentication-in-mcp-browser-http-transport"},{"cve":"CVE-2026-27577","cvss":9.9,"epss":0.0101,"slug":"cve-2026-27577-n8n-code-injection-in-expression-evaluation","title":"n8n code injection in expression evaluation","severity":"critical","exploited":false,"published_at":"2026-02-25T23:16:21.387+00:00","url":"https://junglewise.ai/threats/cve-2026-27577-n8n-code-injection-in-expression-evaluation"},{"cve":"CVE-2026-54310","cvss":9.9,"epss":0.0055,"slug":"cve-2026-54310-n8n-sql-injection-in-timescaledb-and-postgres-v1-nodes","title":"n8n SQL injection in TimescaleDB and Postgres v1 nodes","severity":"critical","exploited":false,"published_at":"2026-06-23T16:17:01.99+00:00","url":"https://junglewise.ai/threats/cve-2026-54310-n8n-sql-injection-in-timescaledb-and-postgres-v1-nodes"},{"cve":"CVE-2026-44791","cvss":9.9,"epss":0.0054,"slug":"cve-2026-44791-n8n-prototype-pollution-in-xml-node-leading-to-rce","title":"n8n prototype pollution in XML node leading to RCE","severity":"critical","exploited":false,"published_at":"2026-06-23T17:16:59.547+00:00","url":"https://junglewise.ai/threats/cve-2026-44791-n8n-prototype-pollution-in-xml-node-leading-to-rce"},{"cve":"CVE-2026-44789","cvss":9.9,"epss":0.0053,"slug":"cve-2026-44789-n8n-prototype-pollution-in-http-request-node","title":"n8n prototype pollution in HTTP Request node","severity":"critical","exploited":false,"published_at":"2026-06-23T17:16:59.29+00:00","url":"https://junglewise.ai/threats/cve-2026-44789-n8n-prototype-pollution-in-http-request-node"},{"cve":"CVE-2026-54307","cvss":9.6,"epss":0.0039,"slug":"cve-2026-54307-n8n-incorrect-authorization-in-shared-workflow-credentials","title":"n8n incorrect authorization in shared workflow credentials","severity":"critical","exploited":false,"published_at":"2026-06-23T17:17:07.01+00:00","url":"https://junglewise.ai/threats/cve-2026-54307-n8n-incorrect-authorization-in-shared-workflow-credentials"},{"cve":"CVE-2026-44792","cvss":9,"epss":0.0039,"slug":"cve-2026-44792-n8n-sql-injection-in-source-control-via-data-table-json","title":"n8n SQL injection in Source Control via Data Table JSON","severity":"critical","exploited":false,"published_at":"2026-06-23T17:16:59.67+00:00","url":"https://junglewise.ai/threats/cve-2026-44792-n8n-sql-injection-in-source-control-via-data-table-json"},{"cve":"CVE-2026-86076","cvss":8.8,"epss":0.0079,"slug":"cve-2026-86076-n8n-expression-sandbox-escape-via-class-field-sanitizer-rebinding","title":"n8n expression sandbox escape via class-field sanitizer rebinding","severity":"high","exploited":false,"published_at":"2026-09-08T22:19:16.387+00:00","url":"https://junglewise.ai/threats/cve-2026-86076-n8n-expression-sandbox-escape-via-class-field-sanitizer-rebinding"},{"cve":"CVE-2026-86083","cvss":8.8,"epss":0.0066,"slug":"cve-2026-86083-n8n-expression-sandbox-escape-in-legacy-engine-via-json-stringify","title":"n8n expression sandbox escape in legacy engine via JSON.stringify tampering","severity":"high","exploited":false,"published_at":"2026-09-08T22:19:17.383+00:00","url":"https://junglewise.ai/threats/cve-2026-86083-n8n-expression-sandbox-escape-in-legacy-engine-via-json-stringify"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}