agentprime: n8n

agentprime: n8nEvery new CVE for n8n.https://agentprime.io/CVE-2026-119557: n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Nodehttps://agentprime.io/advisories/CVE-2026-119557/https://agentprime.io/advisories/CVE-2026-119557/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:31:06 GMTCVECVE-2026-119408: n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodeshttps://agentprime.io/advisories/CVE-2026-119408/https://agentprime.io/advisories/CVE-2026-119408/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:30:45 GMTCVECVE-2026-118679: n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Triggerhttps://agentprime.io/advisories/CVE-2026-118679/https://agentprime.io/advisories/CVE-2026-118679/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:51 GMTCVECVE-2026-118678: n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compactionhttps://agentprime.io/advisories/CVE-2026-118678/https://agentprime.io/advisories/CVE-2026-118678/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:50 GMTCVECVE-2026-118677: n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instancehttps://agentprime.io/advisories/CVE-2026-118677/https://agentprime.io/advisories/CVE-2026-118677/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:49 GMTCVECVE-2026-118676: n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypasshttps://agentprime.io/advisories/CVE-2026-118676/https://agentprime.io/advisories/CVE-2026-118676/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:49 GMTCVECVE-2026-118675: n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflowhttps://agentprime.io/advisories/CVE-2026-118675/https://agentprime.io/advisories/CVE-2026-118675/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:48 GMTCVECVE-2026-118649: n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tableshttps://agentprime.io/advisories/CVE-2026-118649/https://agentprime.io/advisories/CVE-2026-118649/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:47 GMTCVECVE-2026-118648: n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policyhttps://agentprime.io/advisories/CVE-2026-118648/https://agentprime.io/advisories/CVE-2026-118648/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:46 GMTCVECVE-2026-118647: n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Datahttps://agentprime.io/advisories/CVE-2026-118647/https://agentprime.io/advisories/CVE-2026-118647/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:46 GMTCVECVE-2026-118646: n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Nodehttps://agentprime.io/advisories/CVE-2026-118646/https://agentprime.io/advisories/CVE-2026-118646/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:45 GMTCVECVE-2026-118645: n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameterhttps://agentprime.io/advisories/CVE-2026-118645/https://agentprime.io/advisories/CVE-2026-118645/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:44 GMTCVECVE-2026-118644: n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritancehttps://agentprime.io/advisories/CVE-2026-118644/https://agentprime.io/advisories/CVE-2026-118644/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:44 GMTCVECVE-2026-118643: n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Datahttps://agentprime.io/advisories/CVE-2026-118643/https://agentprime.io/advisories/CVE-2026-118643/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:41 GMTCVECVE-2026-118642: n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflowshttps://agentprime.io/advisories/CVE-2026-118642/https://agentprime.io/advisories/CVE-2026-118642/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:40 GMTCVECVE-2026-118641: n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodeshttps://agentprime.io/advisories/CVE-2026-118641/https://agentprime.io/advisories/CVE-2026-118641/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:40 GMTCVECVE-2026-118640: n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypasshttps://agentprime.io/advisories/CVE-2026-118640/https://agentprime.io/advisories/CVE-2026-118640/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:39 GMTCVECVE-2026-110853: n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSONhttps://agentprime.io/advisories/CVE-2026-110853/https://agentprime.io/advisories/CVE-2026-110853/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:29 GMTCVECVE-2026-110852: n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolutionhttps://agentprime.io/advisories/CVE-2026-110852/https://agentprime.io/advisories/CVE-2026-110852/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:28 GMTCVECVE-2026-110851: n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpointhttps://agentprime.io/advisories/CVE-2026-110851/https://agentprime.io/advisories/CVE-2026-110851/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:27 GMTCVECVE-2026-110850: n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parametershttps://agentprime.io/advisories/CVE-2026-110850/https://agentprime.io/advisories/CVE-2026-110850/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:26 GMTCVECVE-2026-110849: n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Previewhttps://agentprime.io/advisories/CVE-2026-110849/https://agentprime.io/advisories/CVE-2026-110849/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:24 GMTCVECVE-2026-110848: n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Mergehttps://agentprime.io/advisories/CVE-2026-110848/https://agentprime.io/advisories/CVE-2026-110848/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:23 GMTCVECVE-2026-110847: n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameterhttps://agentprime.io/advisories/CVE-2026-110847/https://agentprime.io/advisories/CVE-2026-110847/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:22 GMTCVECVE-2026-110846: n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhookhttps://agentprime.io/advisories/CVE-2026-110846/https://agentprime.io/advisories/CVE-2026-110846/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:21 GMTCVECVE-2026-110845: n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operationhttps://agentprime.io/advisories/CVE-2026-110845/https://agentprime.io/advisories/CVE-2026-110845/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:20 GMTCVECVE-2026-110844: n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflowshttps://agentprime.io/advisories/CVE-2026-110844/https://agentprime.io/advisories/CVE-2026-110844/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:19 GMTCVECVE-2026-110843: n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpointhttps://agentprime.io/advisories/CVE-2026-110843/https://agentprime.io/advisories/CVE-2026-110843/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:18 GMTCVECVE-2026-110842: n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreterhttps://agentprime.io/advisories/CVE-2026-110842/https://agentprime.io/advisories/CVE-2026-110842/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:17 GMTCVECVE-2026-110841: n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approvalhttps://agentprime.io/advisories/CVE-2026-110841/https://agentprime.io/advisories/CVE-2026-110841/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:16 GMTCVECVE-2026-110840: n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Fieldhttps://agentprime.io/advisories/CVE-2026-110840/https://agentprime.io/advisories/CVE-2026-110840/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:15 GMTCVECVE-2026-103260: n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Nodehttps://agentprime.io/advisories/CVE-2026-103260/https://agentprime.io/advisories/CVE-2026-103260/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:03 GMTCVECVE-2026-103259: n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentialshttps://agentprime.io/advisories/CVE-2026-103259/https://agentprime.io/advisories/CVE-2026-103259/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:02 GMTCVECVE-2026-103258: n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolationhttps://agentprime.io/advisories/CVE-2026-103258/https://agentprime.io/advisories/CVE-2026-103258/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:02 GMTCVECVE-2026-103257: n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Nodehttps://agentprime.io/advisories/CVE-2026-103257/https://agentprime.io/advisories/CVE-2026-103257/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:01 GMTCVECVE-2026-103256: n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hookhttps://agentprime.io/advisories/CVE-2026-103256/https://agentprime.io/advisories/CVE-2026-103256/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:00 GMTCVECVE-2026-103255: n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabasehttps://agentprime.io/advisories/CVE-2026-103255/https://agentprime.io/advisories/CVE-2026-103255/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:00 GMTCVECVE-2026-103254: n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generationhttps://agentprime.io/advisories/CVE-2026-103254/https://agentprime.io/advisories/CVE-2026-103254/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:59 GMTCVECVE-2026-103253: n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Tablehttps://agentprime.io/advisories/CVE-2026-103253/https://agentprime.io/advisories/CVE-2026-103253/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:58 GMTCVECVE-2026-103252: n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpointhttps://agentprime.io/advisories/CVE-2026-103252/https://agentprime.io/advisories/CVE-2026-103252/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:57 GMTCVECVE-2026-103251: n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSubhttps://agentprime.io/advisories/CVE-2026-103251/https://agentprime.io/advisories/CVE-2026-103251/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:57 GMTCVECVE-2026-103250: n8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat Memoryhttps://agentprime.io/advisories/CVE-2026-103250/https://agentprime.io/advisories/CVE-2026-103250/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:56 GMTCVECVE-2026-103249: n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locatorhttps://agentprime.io/advisories/CVE-2026-103249/https://agentprime.io/advisories/CVE-2026-103249/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:55 GMTCVECVE-2026-103248: n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabasehttps://agentprime.io/advisories/CVE-2026-103248/https://agentprime.io/advisories/CVE-2026-103248/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:55 GMTCVECVE-2026-103247: n8n before 1.123.80 Credential Tampering via Duplicate Node IDshttps://agentprime.io/advisories/CVE-2026-103247/https://agentprime.io/advisories/CVE-2026-103247/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:54 GMTCVECVE-2026-103246: n8n before 2.39.6 and 2.40.x before 2.40.1 Credential Disclosure via Node-Tool Introspectionhttps://agentprime.io/advisories/CVE-2026-103246/https://agentprime.io/advisories/CVE-2026-103246/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:53 GMTCVECVE-2026-103245: n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verificationhttps://agentprime.io/advisories/CVE-2026-103245/https://agentprime.io/advisories/CVE-2026-103245/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:41:52 GMTCVECVE-2026-92588: n8n before 1.123.76 Improper Authorization via Source Control Pushhttps://agentprime.io/advisories/CVE-2026-92588/https://agentprime.io/advisories/CVE-2026-92588/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:54 GMTCVECVE-2026-92587: n8n before 1.123.76 Sandbox Escape via Git Relative URLhttps://agentprime.io/advisories/CVE-2026-92587/https://agentprime.io/advisories/CVE-2026-92587/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:53 GMTCVECVE-2026-85173: n8n before 2.36.2 Missing Authorization via Insights APIhttps://agentprime.io/advisories/CVE-2026-85173/https://agentprime.io/advisories/CVE-2026-85173/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:22:21 GMTCVE