n8n

Top products

The 15 most recently published vulnerabilities affecting n8n.

• CVE-2026-65599n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header6.5Jul 22, 2026
• CVE-2026-65598n8n before 1.123.64 Remote Code Execution via Git Clone7.5Jul 22, 2026
• CVE-2026-65597n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe5.4Jul 22, 2026
• CVE-2026-65596n8n before 1.123.64 Credential Exfiltration via GraphQL Node8.1Jul 22, 2026
• CVE-2026-65595n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange8.8Jul 22, 2026
• CVE-2026-65594n8n before 2.30.1 Missing OAuth Authorization Check6.5Jul 22, 2026
• CVE-2026-65593n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters5.4Jul 22, 2026
• CVE-2026-65592n8n before 1.123.64 Stored DOM XSS via cachedResultUrl5.4Jul 22, 2026
• CVE-2026-65590n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows9.8Jul 22, 2026
• CVE-2026-65591n8n before 1.123.64 Sanitizer Bypass Remote Code Execution8.8Jul 22, 2026
• CVE-2026-65589n8n before 1.123.64 Credential Exposure via LLM Node Execution Data6.5Jul 22, 2026
• CVE-2026-65016n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role8.8Jul 22, 2026
• CVE-2026-65015n8n before 2.30.1 Privilege Escalation via run_node_tool8.8Jul 22, 2026
• CVE-2026-65014n8n before 2.28.0 Authentication Bypass via test-webhook5.3Jul 22, 2026
• CVE-2026-59259n8n - Permission Bypass via Expression Parser Mismatch in External Secrets6.5Jul 15, 2026