AI Threat Alert

n8n Vulnerabilities

npm AI Agents

AI Threat Alert tracks 229 known vulnerabilities in n8n, 24 rated critical — an AI/ML ai agents in the npm ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
69
Risk Score
229
Total CVEs
24
Critical
npm
Ecosystem
Sep 8, 2026
Last CVE
53%
Patch Rate
5d
Avg Time to Patch
206,068 stars 60,893 forks 1,108 issues Last push Sep 27, 2026
View on GitHub
OpenSSF Scorecard 6.7/10

Known Vulnerabilities (229 total, page 7 of 10)

Severity CVE ID Summary CVSS Published
CRITICAL CVE-2026-44791 n8n: XML node patch bypass enables host RCE 9.9 May 14, 2026 CRITICAL CVE-2026-44792 n8n: SQL injection via poisoned Source Control git repo 9.0 May 14, 2026 HIGH CVE-2026-45732 n8n: OAuth token hijack via credential permission bypass 8.1 May 14, 2026 UNKNOWN CVE-2026-44694 n8n-MCP: SSRF allows internal network access via webhook tools -- May 8, 2026 HIGH GHSA-8g7g-hmwm-6rv2 n8n-mcp: path traversal + SSRF exposes n8n API keys 8.3 May 8, 2026 HIGH CVE-2026-42449 n8n-mcp: SSRF bypass via IPv6 leaks API keys 8.5 Apr 30, 2026 UNKNOWN CVE-2026-42237 n8n: SQL injection in Snowflake/MySQL nodes bypasses fix -- Apr 29, 2026 UNKNOWN CVE-2026-42233 n8n: SQL injection in Oracle node allows data exfiltration -- Apr 29, 2026 UNKNOWN CVE-2026-42230 n8n: MCP OAuth open redirect enables phishing -- Apr 29, 2026 UNKNOWN CVE-2026-42229 n8n: SQL injection in SeaTable node leaks restricted rows -- Apr 29, 2026 UNKNOWN CVE-2026-42228 n8n: WebSocket auth bypass hijacks AI agent workflows -- Apr 29, 2026 UNKNOWN CVE-2026-42236 n8n: unauthenticated MCP endpoint causes memory DoS -- Apr 29, 2026 UNKNOWN CVE-2026-42227 n8n: IDOR leaks cross-project variables via API key -- Apr 29, 2026 UNKNOWN CVE-2026-42234 n8n: Python sandbox escape enables container RCE -- Apr 29, 2026 UNKNOWN CVE-2026-42226 n8n: IDOR exposes cross-user API key exfiltration -- Apr 29, 2026 UNKNOWN CVE-2026-42235 n8n: stored XSS via MCP OAuth steals agent sessions -- Apr 29, 2026 UNKNOWN CVE-2026-42231 n8n: prototype pollution → RCE via Git node SSH -- Apr 29, 2026 UNKNOWN CVE-2026-42232 n8n: XML Node prototype pollution → RCE -- Apr 29, 2026 MEDIUM GHSA-wg4g-395p-mqv3 n8n-mcp: credential exposure via HTTP transport logging 4.3 Apr 25, 2026 MEDIUM CVE-2026-41495 n8n-mcp: bearer tokens exposed in HTTP transport logs 5.3 Apr 23, 2026 HIGH GHSA-75hx-xj24-mqrw n8n-mcp: unauthenticated HTTP endpoints enable DoS + recon 8.2 Apr 10, 2026 HIGH GHSA-4ggg-h7ph-26qr n8n-mcp: authenticated SSRF leaks cloud metadata 8.5 Apr 8, 2026 MEDIUM GHSA-q4fm-pjq6-m63g n8n: Stored XSS in Form Trigger enables phishing 5.4 Mar 27, 2026 MEDIUM GHSA-w673-8fjw-457c n8n: stored XSS enables phishing via Form Node 4.1 Mar 27, 2026 MEDIUM GHSA-3c7f-5hgj-h279 n8n: Stored XSS in Chat Trigger via CSS injection 5.4 Mar 27, 2026

Showing 151–175 of 229

← Previous Next →

Frequently asked questions

What is n8n?

n8n is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the npm ecosystem.

How many known vulnerabilities does n8n have?

n8n has 229 known CVEs, 24 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is n8n distributed in?

n8n is distributed via the npm ecosystem and categorized as ai agents.

Where does the n8n vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of n8n?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor n8n in your stack

Get instant alerts when new vulnerabilities affect n8n. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring