AI Threat Alert

n8n Vulnerabilities

npm AI Agents

AI Threat Alert tracks 184 known vulnerabilities in n8n, 23 rated critical — an AI/ML ai agents in the npm ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
69
Risk Score
184
Total CVEs
23
Critical
npm
Ecosystem
Aug 11, 2026
Last CVE
55%
Patch Rate
6d
Avg Time to Patch
200,801 stars 60,149 forks 1,301 issues 16 dependents Last push Aug 16, 2026
View on GitHub
OpenSSF Scorecard 6.6/10

Known Vulnerabilities (184 total, page 1 of 8)

Severity CVE ID Summary CVSS Published
UNKNOWN CVE-2026-72775 n8n: SQL injection via PostgresTrigger node -- Aug 11, 2026 UNKNOWN CVE-2026-72774 n8n: credential auth bypass in HTTP Request node -- Aug 11, 2026 UNKNOWN CVE-2026-72773 n8n: path traversal leaks arbitrary local files -- Aug 11, 2026 UNKNOWN CVE-2026-72772 n8n: account takeover via unverified SSO email claim -- Aug 11, 2026 UNKNOWN CVE-2026-72771 n8n: allowlist bypass in AI nodes leaks credentials -- Aug 11, 2026 UNKNOWN CVE-2026-72770 n8n: path traversal in Git node bypasses repo sandbox -- Aug 11, 2026 UNKNOWN CVE-2026-72769 n8n: prototype pollution in VM engine crashes process -- Aug 11, 2026 UNKNOWN CVE-2026-72768 n8n: SSRF bypass in MCP Client node exposes internal hosts -- Aug 11, 2026 UNKNOWN CVE-2026-72767 n8n: Git node RCE via malicious repo hooks -- Aug 11, 2026 UNKNOWN CVE-2026-72766 n8n: Send Email node type confusion enables SSRF, LFI -- Aug 11, 2026 UNKNOWN CVE-2026-72765 n8n: expression sandbox escape leads to RCE -- Aug 11, 2026 UNKNOWN CVE-2026-72764 n8n: module cache poisoning breaks multi-user isolation -- Aug 11, 2026 UNKNOWN CVE-2026-72763 n8n: Editor role bypasses credential ACL via sub-workflow -- Aug 11, 2026 UNKNOWN CVE-2026-72762 n8n: arbitrary file write via Edit Image node format param -- Aug 11, 2026 UNKNOWN CVE-2026-72750 n8n: SQL injection via Snowflake node Execute Query -- Aug 11, 2026 UNKNOWN CVE-2026-72749 n8n: prototype pollution DoS via Edit Fields node -- Aug 11, 2026 HIGH GHSA-v42f-v8xc-j435 Budibase: SSRF guard bypass via DNS rebinding 8.5 Jul 24, 2026 HIGH GHSA-8342-988q-86cr n8n: auth bypass via embed login token exchange -- Jul 22, 2026 HIGH GHSA-64xh-79j6-r5v8 n8n: AI node credential allowlist bypass leaks secrets -- Jul 22, 2026 HIGH GHSA-gf29-4f56-r2jf n8n: Git node bypass leaks arbitrary local repos -- Jul 22, 2026 MEDIUM GHSA-vhf8-cg2h-cg3p n8n: MCP Client SSRF bypasses egress protection -- Jul 22, 2026 HIGH GHSA-rcv6-pvrj-4xcg n8n: Git node RCE via malicious repo hooks -- Jul 22, 2026 HIGH GHSA-2x35-3fw4-9jr4 n8n: type confusion in Send Email leaks host files -- Jul 22, 2026 HIGH GHSA-gv7g-jm28-cr3m n8n: expression sandbox bypass enables host RCE -- Jul 22, 2026 HIGH GHSA-6qc9-mqvw-jg7x n8n: authz bypass exposes shared workflow credentials -- Jul 22, 2026

Showing 1–25 of 184

Next →

Frequently asked questions

What is n8n?

n8n is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the npm ecosystem.

How many known vulnerabilities does n8n have?

n8n has 184 known CVEs, 23 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is n8n distributed in?

n8n is distributed via the npm ecosystem and categorized as ai agents.

Where does the n8n vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of n8n?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor n8n in your stack

Get instant alerts when new vulnerabilities affect n8n. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring