n8n-io
Number 91 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
206
Critical
25
High
105
Known Exploited
1
Exploit available
0
Network, no login needed
20.9%
Of 206 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 193 | 22 | 101 | 69 | 1 | 0 |
| 2025 | 13 | 3 | 4 | 6 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| n8n | 206 | 130 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Cross-Site Scripting | 19 | 15 |
| Insecure Direct Object Reference | 18 | 10 |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | 16 | 11 |
| Incorrect Authorization | 16 | 11 |
| Code Injection | 15 | 14 |
| SQL Injection | 13 | 6 |
| Missing Authorization | 10 | 2 |
| Path Traversal | 10 | 4 |
| Server-Side Request Forgery | 8 | 2 |
| Command Injection | 7 | 6 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2025-68613 | n8n Vulnerable to Remote Code Execution via Expression Injection | Critical | 99.0% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-119557 | n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node | Medium | 0.5% | |
| CVE-2026-119408 | n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes | High | 0.6% | |
| CVE-2026-118679 | n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger | High | 0.3% | |
| CVE-2026-118678 | n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction | High | 0.3% | |
| CVE-2026-118677 | n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance | Medium | 0.2% | |
| CVE-2026-118676 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass | High | 0.2% | |
| CVE-2026-118675 | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow | High | 0.2% | |
| CVE-2026-118649 | n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables | High | 0.3% | |
| CVE-2026-118648 | n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy | High | 0.3% | |
| CVE-2026-118647 | n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data | High | 0.3% |