en
n8n is a global, open-source workflow automation platform maintained by n8n GmbH. It operates as a (multi-tenant) platform for building and orchestrating automated tasks with a visual editor and code extensions, supporting on-premises and cloud deployments.
As of 10/26/2026, n8n-io recorded 92 security vulnerabilities in the last 90 days across 1 products, including 53 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, n8n had the most security vulnerabilities in the n8n-io ecosystem, with 92 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-110853n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSONCVE-2026-110852n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook ResolutionCVE-2026-110851n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create EndpointCVE-2026-110850n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node ParametersCVE-2026-110849n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview189 Results | Page 1 of 19
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |