# n8n (npm) vulnerabilities

Source: https://junglewise.ai/threats/technologies/npm-n8n  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/npm-n8n.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 64 vulnerabilities in n8n (npm): 0 in the last 7 days and 14 in the last 90 days, 8 of them critical and 1 exploited in the wild. The most recent, CVE-2026-86996, was published on 8 September 2026. Nothing was published in the last eight weeks.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 14
- All time: 64 (8 critical, 1 exploited in the wild)

## About n8n (npm)

Open-source workflow automation and task orchestration platform.

## Latest n8n (npm) vulnerabilities

- [CVE-2026-86996: n8n Agent Workflow Tool bypasses Sub-Workflow Caller Policy](https://junglewise.ai/threats/cve-2026-86996-n8n-agent-workflow-tool-bypasses-sub-workflow-caller-policy) (medium, CVSS 5.4, published 8 Sep 2026)
- [CVE-2026-86995: n8n Git Node config bypass enables local repository read](https://junglewise.ai/threats/cve-2026-86995-n8n-git-node-config-bypass-enables-local-repository-read) (medium, CVSS 4.3, published 8 Sep 2026)
- [CVE-2026-86994: n8n missing authorization in active workflows endpoint](https://junglewise.ai/threats/cve-2026-86994-n8n-missing-authorization-in-active-workflows-endpoint) (medium, CVSS 4.3, published 8 Sep 2026)
- [CVE-2026-86993: n8n log streaming credentials unauthorized access](https://junglewise.ai/threats/cve-2026-86993-n8n-log-streaming-credentials-unauthorized-access) (medium, CVSS 4.9, published 8 Sep 2026)
- [CVE-2026-86085: n8n missing authorization in role assignment endpoints](https://junglewise.ai/threats/cve-2026-86085-n8n-missing-authorization-in-role-assignment-endpoints) (medium, CVSS 4.9, published 8 Sep 2026)
- [CVE-2026-86084: n8n authentication bypass via disabled OIDC SSO endpoints](https://junglewise.ai/threats/cve-2026-86084-n8n-authentication-bypass-via-disabled-oidc-sso-endpoints) (medium, CVSS 5.5, published 8 Sep 2026)
- [CVE-2026-86083: n8n expression sandbox escape in legacy engine via JSON.stringify tampering](https://junglewise.ai/threats/cve-2026-86083-n8n-expression-sandbox-escape-in-legacy-engine-via-json-stringify) (high, CVSS 8.8, published 8 Sep 2026)
- [CVE-2026-86081: n8n regular expression denial of service in Git node file pattern](https://junglewise.ai/threats/cve-2026-86081-n8n-regular-expression-denial-of-service-in-git-node-file-pattern) (high, CVSS 4, published 8 Sep 2026)
- [CVE-2026-86079: n8n path injection in Elasticsearch and ElasticSecurity nodes](https://junglewise.ai/threats/cve-2026-86079-n8n-path-injection-in-elasticsearch-and-elasticsecurity-nodes) (medium, CVSS 6.5, published 8 Sep 2026)
- [CVE-2026-86078: n8n prototype pollution in workflow summary](https://junglewise.ai/threats/cve-2026-86078-n8n-prototype-pollution-in-workflow-summary) (medium, CVSS 6.5, published 8 Sep 2026)
- [CVE-2026-86076: n8n expression sandbox escape via class-field sanitizer rebinding](https://junglewise.ai/threats/cve-2026-86076-n8n-expression-sandbox-escape-via-class-field-sanitizer-rebinding) (high, CVSS 8.8, published 8 Sep 2026)
- [CVE-2026-86075: n8n unauthenticated storage exhaustion via OAuth registration](https://junglewise.ai/threats/cve-2026-86075-n8n-unauthenticated-storage-exhaustion-via-oauth-registration) (high, CVSS 7.5, published 8 Sep 2026)
- [CVE-2026-86074: n8n Instance AI credential setup SSRF via unvalidated probe URL](https://junglewise.ai/threats/cve-2026-86074-n8n-instance-ai-credential-setup-ssrf-via-unvalidated-probe-url) (high, CVSS 7.1, published 8 Sep 2026)
- [CVE-2026-86073: n8n OAuth consent bypass via unbound refresh token](https://junglewise.ai/threats/cve-2026-86073-n8n-oauth-consent-bypass-via-unbound-refresh-token) (high, CVSS 7.6, published 8 Sep 2026)
- [CVE-2026-65599: n8n credential exposure in Google Service Account JWT header](https://junglewise.ai/threats/cve-2026-65599-n8n-credential-exposure-in-google-service-account-jwt-header) (medium, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65598: n8n TOCTOU race condition in Git node clone operation](https://junglewise.ai/threats/cve-2026-65598-n8n-toctou-race-condition-in-git-node-clone-operation) (high, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65597: n8n DOM-based XSS in HTML preview](https://junglewise.ai/threats/cve-2026-65597-n8n-dom-based-xss-in-html-preview) (high, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65596: n8n authorization bypass in GraphQL node allows credential exfiltration](https://junglewise.ai/threats/cve-2026-65596-n8n-authorization-bypass-in-graphql-node-allows-credential) (medium, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65595: n8n privilege escalation in Token Exchange module](https://junglewise.ai/threats/cve-2026-65595-n8n-privilege-escalation-in-token-exchange-module) (high, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65594: n8n incorrect authorization in OAuth 2.1 flow for MCP Server Triggers](https://junglewise.ai/threats/cve-2026-65594-n8n-incorrect-authorization-in-oauth-2-1-flow-for-mcp-server) (medium, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65593: n8n SSRF in dynamic-node-parameters endpoints](https://junglewise.ai/threats/cve-2026-65593-n8n-ssrf-in-dynamic-node-parameters-endpoints) (medium, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65592: n8n stored DOM XSS in Resource Locator component](https://junglewise.ai/threats/cve-2026-65592-n8n-stored-dom-xss-in-resource-locator-component) (high, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65591: n8n code execution via sanitizer bypass in legacy expression evaluator](https://junglewise.ai/threats/cve-2026-65591-n8n-code-execution-via-sanitizer-bypass-in-legacy-expression) (high, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65590: n8n missing shell sandbox in @n8n/computer-use package](https://junglewise.ai/threats/cve-2026-65590-n8n-missing-shell-sandbox-in-n8n-computer-use-package) (medium, CVSS 4, published 22 Jul 2026)
- [CVE-2026-65589: n8n credential exposure in LLM sub-node execution data](https://junglewise.ai/threats/cve-2026-65589-n8n-credential-exposure-in-llm-sub-node-execution-data) (medium, CVSS 4, published 22 Jul 2026)

## Most severe n8n (npm) vulnerabilities

- [CVE-2025-68613: n8n Vulnerable to Remote Code Execution via Expression Injection](https://junglewise.ai/threats/cve-2025-68613-n8n-remote-code-execution-in-workflow-expression-evaluation) (critical, exploited in the wild, CVSS 9.9, published 19 Dec 2025)
- [CVE-2026-54309: n8n missing authentication in MCP Browser HTTP transport](https://junglewise.ai/threats/cve-2026-54309-n8n-missing-authentication-in-mcp-browser-http-transport) (critical, CVSS 10, published 23 Jun 2026)
- [CVE-2026-27577: n8n code injection in expression evaluation](https://junglewise.ai/threats/cve-2026-27577-n8n-code-injection-in-expression-evaluation) (critical, CVSS 9.9, published 25 Feb 2026)
- [CVE-2026-54310: n8n SQL injection in TimescaleDB and Postgres v1 nodes](https://junglewise.ai/threats/cve-2026-54310-n8n-sql-injection-in-timescaledb-and-postgres-v1-nodes) (critical, CVSS 9.9, published 23 Jun 2026)
- [CVE-2026-44791: n8n prototype pollution in XML node leading to RCE](https://junglewise.ai/threats/cve-2026-44791-n8n-prototype-pollution-in-xml-node-leading-to-rce) (critical, CVSS 9.9, published 23 Jun 2026)
- [CVE-2026-44789: n8n prototype pollution in HTTP Request node](https://junglewise.ai/threats/cve-2026-44789-n8n-prototype-pollution-in-http-request-node) (critical, CVSS 9.9, published 23 Jun 2026)
- [CVE-2026-54307: n8n incorrect authorization in shared workflow credentials](https://junglewise.ai/threats/cve-2026-54307-n8n-incorrect-authorization-in-shared-workflow-credentials) (critical, CVSS 9.6, published 23 Jun 2026)
- [CVE-2026-44792: n8n SQL injection in Source Control via Data Table JSON](https://junglewise.ai/threats/cve-2026-44792-n8n-sql-injection-in-source-control-via-data-table-json) (critical, CVSS 9, published 23 Jun 2026)
- [CVE-2026-86076: n8n expression sandbox escape via class-field sanitizer rebinding](https://junglewise.ai/threats/cve-2026-86076-n8n-expression-sandbox-escape-via-class-field-sanitizer-rebinding) (high, CVSS 8.8, published 8 Sep 2026)
- [CVE-2026-86083: n8n expression sandbox escape in legacy engine via JSON.stringify tampering](https://junglewise.ai/threats/cve-2026-86083-n8n-expression-sandbox-escape-in-legacy-engine-via-json-stringify) (high, CVSS 8.8, published 8 Sep 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 14 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other npm technologies

- [openclaw (npm)](https://junglewise.ai/threats/technologies/npm-openclaw): 214 vulnerabilities
- [flowise (npm)](https://junglewise.ai/threats/technologies/flowise): 133 vulnerabilities
- [parse-server (npm)](https://junglewise.ai/threats/technologies/parse-server): 117 vulnerabilities
- [vm2 (npm)](https://junglewise.ai/threats/technologies/vm2): 111 vulnerabilities
- [electron (npm)](https://junglewise.ai/threats/technologies/electron): 77 vulnerabilities
- [ghost (npm)](https://junglewise.ai/threats/technologies/ghost): 74 vulnerabilities
- [hono (npm)](https://junglewise.ai/threats/technologies/hono): 62 vulnerabilities
- [directus (npm)](https://junglewise.ai/threats/technologies/directus): 61 vulnerabilities
- [nocodb (npm)](https://junglewise.ai/threats/technologies/nocodb): 54 vulnerabilities
- [undici (npm)](https://junglewise.ai/threats/technologies/undici): 53 vulnerabilities
- [@budibase/server (npm)](https://junglewise.ai/threats/technologies/budibase-server): 42 vulnerabilities
- [apostrophe (npm)](https://junglewise.ai/threats/technologies/apostrophe): 36 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "n8n (npm) vulnerabilities", https://junglewise.ai/threats/technologies/npm-n8n, 13 November 2026.