| n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource SubstitutionCVE-2026-86073 · GHSA-CW9W-VV67-HF73 |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched ContentCVE-2026-86074 · GHSA-Q5WM-MGQX-FV2F |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository ReadCVE-2026-86995 · GHSA-QGPW-8G46-W95V |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment EndpointsCVE-2026-86085 · GHSA-CQR2-H44G-V75V |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership CheckCVE-2026-86993 · GHSA-PQ6C-VH67-XPM3 |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid SessionsCVE-2026-86084 · GHSA-PF83-W3F9-8M37 |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-OpenCVE-2026-86080 · GHSA-5M98-CGCR-XX3Q |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded IdentifiersCVE-2026-86079 · GHSA-F2CP-M7MV-8JPV |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of ServiceCVE-2026-86078 · GHSA-679F-58PQ-4V2C |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId FilterCVE-2026-86994 · GHSA-65XW-2V52-JHXC |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code ExecutionCVE-2026-86083 · GHSA-6XCW-7XM6-48C6 |
n8n |
npm |
High
|
Fix reported |
|
| n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocketCVE-2026-86077 · GHSA-35JJ-42HP-8GMQ |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model NodeCVE-2026-86082 · GHSA-34FF-336R-5Q23 |
n8n |
npm |
High
|
Fix reported |
|
| n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone PathCVE-2026-86081 · GHSA-J535-V25Q-VX3Q |
n8n |
npm |
High
|
Fix reported |
|
| n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration EndpointCVE-2026-86075 · GHSA-HH89-3R9W-QJ3J |
n8n |
npm |
High
|
Fix reported |
|
| n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code ExecutionCVE-2026-86076 · GHSA-HW8V-XXG5-VVVX |
n8n |
npm |
High
|
Fix reported |
|
| n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller PolicyCVE-2026-86996 · GHSA-7HGX-277F-7VMG |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account TakeoverCVE-2026-33665 · GHSA-C545-X2RH-82FC |
n8n |
npm |
High
|
Fix reported |
|
| n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base DirectoryCVE-2026-72773 · GHSA-PF2Q-PXHF-HGMW |
n8n |
npm |
Medium
|
Fix reported |
|
| n8n: Edit Image Node Format Injection Allows Arbitrary File WriteCVE-2026-72762 · GHSA-XMC9-4F2H-JF9C |
n8n |
npm |
High
|
Fix reported |
|
