CVE Tools
Track your stack

N8N

267 CVEs tracked. 1 of them are in CISA KEV.

This hub aggregates every CVE we track for N8N, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

N8N CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
N8N CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-041
2025-050
2025-061
2025-072
2025-082
2025-092
2025-102
2025-110
2025-125
2026-016
2026-0224
2026-0315
2026-040
2026-0514
2026-0632
2026-0749
2026-0834
2026-0928
2026-1047
2026-110

Severity

How the 267 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical3114%
  • High9644%
  • Medium8941%

Latest CVEs

The 15 most recently published vulnerabilities affecting N8N.

  1. CVE-2026-119557n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node5.9
  2. CVE-2026-119408n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes8.8
  3. CVE-2026-118679n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger7.5
  4. CVE-2026-118678n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction7.1
  5. CVE-2026-118677n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance5.9
  6. CVE-2026-118676n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass7.1
  7. CVE-2026-118675n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow7.1
  8. CVE-2026-118649n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables8.3
  9. CVE-2026-118648n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy7.3
  10. CVE-2026-118647n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data8.2
  11. CVE-2026-118646n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node6.5
  12. CVE-2026-118645n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter8.7
  13. CVE-2026-118644n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance7.7
  14. CVE-2026-118643n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data8.2
  15. CVE-2026-118641n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes7.5

Product grouping is registry-driven, with AI assist and human review. How it works