n8n-io n8n vulnerabilities and fixes
Exploited and high-severity n8n-io n8n vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.8CVE-2026-119408n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function NodesRCEFix availablen8n-io n8n
1 min read - 7.5CVE-2026-118679n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack TriggerFix availablen8n-io n8n
1 min read - 7.3CVE-2026-118648n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox PolicyFix availablen8n-io n8n
1 min read - 7.1CVE-2026-118675n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflowFix availablen8n-io n8n
1 min read - 7.1CVE-2026-118676n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check BypassFix availablen8n-io n8n
1 min read - 7.1CVE-2026-118642n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-WorkflowsFix availablen8n-io n8n
1 min read - 8.2CVE-2026-118643n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error DataCloudFix availablen8n-io n8n
1 min read - 7.7CVE-2026-118644n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context InheritanceFix availablen8n-io n8n
1 min read - 8.2CVE-2026-118647n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution DataFix availablen8n-io n8n
1 min read