# N8n vulnerabilities Source: https://junglewise.ai/threats/vendors/n8n Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 00:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/n8n.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 243 vulnerabilities in N8n: 0 in the last 7 days and 84 in the last 90 days, 19 of them critical and 1 exploited in the wild. The most recent, CVE-2026-119557, was published on 30 October 2026. 24 vulnerabilities in the last four weeks, up 41% on the four before (17). 0 critical against 2. 1 technology has a page of its own. ## Counts - Last 7 days: 0 - Last 30 days: 24 - Last 90 days: 84 - All time: 243 (19 critical, 1 exploited in the wild) ## About N8n Low-code workflow automation platform for integrating applications and services. ## Latest N8n vulnerabilities - [CVE-2026-119557: n8n path traversal in Databricks node](https://junglewise.ai/threats/cve-2026-119557-n8n-from-2-14-0-through-2-46-3-contains-a-path-traversal) (medium, CVSS 5.9, published 30 Oct 2026) - [CVE-2026-119408: n8n remote code execution in deprecated Function nodes](https://junglewise.ai/threats/cve-2026-119408-n8n-before-2-42-6-2-43-x-before-2-43-3-and-3-x-before-3-0-1) (high, CVSS 8.8, published 30 Oct 2026) - [CVE-2026-118679: n8n Slack Trigger SSRF and token exfiltration](https://junglewise.ai/threats/cve-2026-118679-n8n-before-1-123-83-2-41-4-and-2-42-1-contains-a-server-side) (high, CVSS 7.5, published 28 Oct 2026) - [CVE-2026-118678: n8n prototype pollution in workflow history compaction](https://junglewise.ai/threats/cve-2026-118678-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-prototype) (high, CVSS 7.1, published 28 Oct 2026) - [CVE-2026-118677: n8n Local Gateway deep-link missing confirmation re-pairing](https://junglewise.ai/threats/cve-2026-118677-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-missing) (medium, CVSS 5.9, published 28 Oct 2026) - [CVE-2026-118676: n8n authorization bypass in credential access control](https://junglewise.ai/threats/cve-2026-118676-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-an-authorization) (high, CVSS 7.1, published 28 Oct 2026) - [CVE-2026-118675: n8n credential guard bypass in Execute Sub-workflow node](https://junglewise.ai/threats/cve-2026-118675-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-a-credential) (high, CVSS 7.1, published 28 Oct 2026) - [CVE-2026-118649: n8n prototype pollution in workflow ID caching](https://junglewise.ai/threats/cve-2026-118649-n8n-before-2-43-5-and-2-44-x-before-2-44-1-accepts-a-client) (high, CVSS 8.3, published 28 Oct 2026) - [CVE-2026-118648: n8n stored cross-site scripting in webhook responses](https://junglewise.ai/threats/cve-2026-118648-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1) (high, CVSS 7.3, published 28 Oct 2026) - [CVE-2026-118647: n8n SeaTable Trigger node API token exposure in execution data](https://junglewise.ai/threats/cve-2026-118647-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1) (high, CVSS 8.2, published 28 Oct 2026) - [CVE-2026-118646: n8n glob pattern regular expression denial of service](https://junglewise.ai/threats/cve-2026-118646-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-a-regular) (medium, CVSS 6.5, published 28 Oct 2026) - [CVE-2026-118645: n8n Quick Base node filter injection vulnerability](https://junglewise.ai/threats/cve-2026-118645-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1) (high, CVSS 8.7, published 28 Oct 2026) - [CVE-2026-118644: n8n per-user credential theft via error workflow context inheritance](https://junglewise.ai/threats/cve-2026-118644-n8n-before-2-41-5-and-2-42-x-before-2-42-2-passes-a-failed) (high, CVSS 7.7, published 28 Oct 2026) - [CVE-2026-118643: n8n credential secrets exposure in execution error data](https://junglewise.ai/threats/cve-2026-118643-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1) (high, CVSS 8.2, published 28 Oct 2026) - [CVE-2026-118642: n8n authorization bypass in inline sub-workflow credential check](https://junglewise.ai/threats/cve-2026-118642-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-an-authorization) (high, CVSS 7.1, published 28 Oct 2026) - [CVE-2026-118641: n8n OData $filter injection in Outlook and SharePoint nodes](https://junglewise.ai/threats/cve-2026-118641-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1) (high, CVSS 7.5, published 28 Oct 2026) - [CVE-2026-118640: n8n Chat Hub authorization bypass in tool registration](https://junglewise.ai/threats/cve-2026-118640-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-an-authorization) (medium, CVSS 5.4, published 28 Oct 2026) - [CVE-2026-110853: n8n authorization bypass in Execute Sub-workflow](https://junglewise.ai/threats/cve-2026-110853-n8n-before-1-123-83-contains-an-authorization-bypass) (info, published 14 Oct 2026) - [CVE-2026-110851: n8n authorization bypass in Agents create endpoint](https://junglewise.ai/threats/cve-2026-110851-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-an) (info, published 14 Oct 2026) - [CVE-2026-110848: n8n prototype pollution in AI workflow builder](https://junglewise.ai/threats/cve-2026-110848-n8n-before-1-123-83-2-x-before-2-41-4-and-2-42-x-before-2-42-1) (info, published 14 Oct 2026) - [CVE-2026-110846: n8n Send-and-Wait HMAC signature bypass in waiting-webhook](https://junglewise.ai/threats/cve-2026-110846-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-signature) (info, published 14 Oct 2026) - [CVE-2026-110845: n8n code execution in Git node Log operation](https://junglewise.ai/threats/cve-2026-110845-n8n-before-1-123-83-2-x-before-2-41-4-and-2-42-x-before-2-42-1) (info, published 14 Oct 2026) - [CVE-2026-110843: n8n uncontrolled resource consumption in OAuth authorize endpoint](https://junglewise.ai/threats/cve-2026-110843-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-an) (info, published 14 Oct 2026) - [CVE-2026-110841: n8n authorization bypass in agent chat resume endpoint](https://junglewise.ai/threats/cve-2026-110841-n8n-before-2-41-4-and-2-42-0-contains-an-authorization-bypass-in) (info, published 14 Oct 2026) - [CVE-2026-103260: n8n Send and Wait node approval bypass in Approve Within Chat](https://junglewise.ai/threats/cve-2026-103260-n8n-versions-before-2-39-6-and-2-40-0-before-2-40-1-contain-an) (medium, CVSS 4, published 1 Oct 2026) ## Most severe N8n vulnerabilities - [CVE-2025-68613: n8n Vulnerable to Remote Code Execution via Expression Injection](https://junglewise.ai/threats/cve-2025-68613-n8n-remote-code-execution-in-workflow-expression-evaluation) (critical, exploited in the wild, CVSS 9.9, published 19 Dec 2025) - [CVE-2026-54309: n8n missing authentication in MCP Browser HTTP transport](https://junglewise.ai/threats/cve-2026-54309-n8n-missing-authentication-in-mcp-browser-http-transport) (critical, CVSS 10, published 23 Jun 2026) - [CVE-2025-68668: n8n arbitrary command execution in Pyodide Python Code Node](https://junglewise.ai/threats/cve-2025-68668-n8n-arbitrary-command-execution-in-pyodide-python-code-node) (critical, CVSS 9.9, published 26 Dec 2025) - [CVE-2026-27577: n8n code injection in expression evaluation](https://junglewise.ai/threats/cve-2026-27577-n8n-code-injection-in-expression-evaluation) (critical, CVSS 9.9, published 25 Feb 2026) - [CVE-2026-72765: n8n expression sandbox escape via arrow functions](https://junglewise.ai/threats/cve-2026-72765-n8n-expression-sandbox-escape-via-arrow-functions) (critical, CVSS 9.9, published 11 Aug 2026) - [CVE-2026-85165: n8n expression sandbox bypass in spread and computed-key evaluation](https://junglewise.ai/threats/cve-2026-85165-n8n-expression-sandbox-bypass-in-spread-and-computed-key) (critical, CVSS 9.9, published 3 Sep 2026) - [CVE-2026-54310: n8n SQL injection in TimescaleDB and Postgres v1 nodes](https://junglewise.ai/threats/cve-2026-54310-n8n-sql-injection-in-timescaledb-and-postgres-v1-nodes) (critical, CVSS 9.9, published 23 Jun 2026) - [CVE-2026-44791: n8n prototype pollution in XML node leading to RCE](https://junglewise.ai/threats/cve-2026-44791-n8n-prototype-pollution-in-xml-node-leading-to-rce) (critical, CVSS 9.9, published 23 Jun 2026) - [CVE-2026-44789: n8n prototype pollution in HTTP Request node](https://junglewise.ai/threats/cve-2026-44789-n8n-prototype-pollution-in-http-request-node) (critical, CVSS 9.9, published 23 Jun 2026) - [CVE-2026-54305: n8n improper access control in Dynamic Credentials EE endpoints](https://junglewise.ai/threats/cve-2026-54305-n8n-improper-access-control-in-dynamic-credentials-ee-endpoints) (critical, CVSS 9.9, published 23 Jun 2026) ## Vulnerabilities per week 24 vulnerabilities in the last four weeks, up 41% on the four before (17). 0 critical against 2. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 17 | 2 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 9 | 1 | 0 | | 7 Sep 2026 | 17 | 0 | 0 | | 14 Sep 2026 | 2 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 15 | 2 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 7 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 17 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## N8n technologies - [N8n](https://junglewise.ai/threats/technologies/n8n): 243 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "N8n vulnerabilities", https://junglewise.ai/threats/vendors/n8n, 12 November 2026.