n8n vulnerabilities
We track 129 vulnerabilities in n8n products. 129 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 13, 2026.
Latest n8n vulnerabilities
- 9.9 Critical severity
n8n: Time-of-check Time-of-use (TOCTOU) Race Condition
n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n host system. Thi
- 9.9 Critical severity
n8n: Improper Control of Dynamically-Managed Code Resources
n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution
- 7.7 High severity
n8n: Exposure of Sensitive Information to an Unauthorized Actor
n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe() and Buffer.allocUnsafeSlow() in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized buffers could
- 9.9 Critical severity
n8n: Improper Control of Generation of Code
n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instanc
- 10.0 Critical severity
n8n is an open source workflow automation platform.
n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an un
- 9.9 Critical severity
n8n: Protection Mechanism Failure
n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulner
- 8.8 High severity
n8n Improper Control of Dynamically-Managed Code Resources Exploited
n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions,
- 8.8 High severity
n8n: Inclusion of Functionality from Untrusted Control Sphere
n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git configuration values, in
- 8.8 High severity
n8n: Inclusion of Functionality from Untrusted Control Sphere
n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a