AI Threat Alert

n8n Vulnerabilities

npm AI Agents

AI Threat Alert tracks 229 known vulnerabilities in n8n, 24 rated critical — an AI/ML ai agents in the npm ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
69
Risk Score
229
Total CVEs
24
Critical
npm
Ecosystem
Sep 8, 2026
Last CVE
53%
Patch Rate
5d
Avg Time to Patch
206,068 stars 60,893 forks 1,108 issues Last push Sep 27, 2026
View on GitHub
OpenSSF Scorecard 6.7/10

Known Vulnerabilities (229 total, page 6 of 10)

Severity CVE ID Summary CVSS Published
UNKNOWN CVE-2026-54302 n8n: stored XSS in Chat Trigger enables session hijack -- Jun 16, 2026 MEDIUM GHSA-jwm3-qcfw-c5pp n8n: AST bypass leaks env vars in Python Task Runner 5.0 Jun 16, 2026 MEDIUM GHSA-h3jj-5f3v-3685 n8n: read-only users can trigger workflow execution via API 6.4 Jun 16, 2026 MEDIUM CVE-2026-54314 n8n: decompression bomb DoS via public webhook -- Jun 16, 2026 UNKNOWN CVE-2026-54307 n8n: credential hijack via partial authorization bypass -- Jun 16, 2026 UNKNOWN CVE-2026-54305 n8n: IDOR enables OAuth credential hijack in agent workflows -- Jun 16, 2026 UNKNOWN CVE-2026-54309 n8n: MCP browser auth bypass allows full browser takeover -- Jun 16, 2026 UNKNOWN CVE-2026-54304 n8n: credential exfiltration via SecurityScorecard SSRF node -- Jun 16, 2026 UNKNOWN CVE-2026-49444 n8n: Python sandbox escape enables container RCE -- Jun 16, 2026 UNKNOWN CVE-2026-49465 n8n: Git node path traversal bypasses file sandbox -- Jun 16, 2026 UNKNOWN CVE-2026-54310 n8n: SQL injection in Postgres nodes, CVSS 9.9 -- Jun 16, 2026 UNKNOWN CVE-2026-54313 n8n: MongoDB query injection overwrites arbitrary documents -- Jun 16, 2026 HIGH GHSA-hv7x-3x78-gx53 n8n: auth bypass lets read-only users execute workflows 7.4 Jun 16, 2026 MEDIUM CVE-2026-54308 n8n: unauthed webhook bypass hijacks AI agent workflows -- Jun 16, 2026 HIGH CVE-2026-54301 n8n: XSS via CSP bypass steals user sessions -- Jun 16, 2026 MEDIUM CVE-2026-54306 n8n: webhook prototype pollution enables confused deputy -- Jun 16, 2026 UNKNOWN CVE-2026-54311 n8n: prototype pollution leaks cross-user workflow data -- Jun 16, 2026 HIGH CVE-2026-48146 Budibase: SSRF in OAuth2 exposes cloud credentials 7.7 Jun 12, 2026 CRITICAL GHSA-3875-8gcx-7v46 n8n: SSRF bypasses credential domain restrictions 9.1 May 19, 2026 MEDIUM GHSA-2vx9-7wpg-88jq n8n: path traversal bypasses file access restriction 6.4 May 19, 2026 HIGH CVE-2026-45707 n8n-mcp: tenant isolation bypass, operator RCE risk 8.1 May 18, 2026 MEDIUM CVE-2026-45582 n8n-mcp: telemetry leak exposes workflow URL secrets 6.5 May 18, 2026 HIGH CVE-2026-45548 @budibase/server: SSRF in AI Extract bypasses IP blacklist 7.7 May 15, 2026 CRITICAL CVE-2026-44789 n8n: prototype pollution in HTTP node enables RCE 9.9 May 14, 2026 HIGH CVE-2026-44790 n8n: Git node arg injection enables full server compromise 8.8 May 14, 2026

Showing 126–150 of 229

← Previous Next →

Frequently asked questions

What is n8n?

n8n is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the npm ecosystem.

How many known vulnerabilities does n8n have?

n8n has 229 known CVEs, 24 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is n8n distributed in?

n8n is distributed via the npm ecosystem and categorized as ai agents.

Where does the n8n vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of n8n?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor n8n in your stack

Get instant alerts when new vulnerabilities affect n8n. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring