n8n Vulnerabilities

npm AI Agents

AI Threat Alert tracks 229 known vulnerabilities in n8n, 24 rated critical — an AI/ML ai agents in the npm ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources

Risk Score

229

Total CVEs

Critical

npm

Ecosystem

Sep 8, 2026

Last CVE

53%

Patch Rate

Avg Time to Patch

206,068 stars 60,893 forks 1,108 issues Last push Sep 27, 2026

View on GitHub

OpenSSF Scorecard 6.7/10

Known Vulnerabilities (229 total, page 8 of 10)

Severity CVE ID Summary CVSS Published

MEDIUM GHSA-364x-8g5j-x2pr n8n: stored XSS via malicious OAuth2 Authorization URL 5.4 Mar 27, 2026 MEDIUM CVE-2026-33751 n8n: LDAP injection enables auth bypass in workflows 4.8 Mar 25, 2026 CRITICAL CVE-2026-33749 n8n: stored XSS enables credential theft via workflow 9.0 Mar 25, 2026 HIGH CVE-2026-33724 n8n: SSH MitM enables malicious workflow injection 7.4 Mar 25, 2026 MEDIUM CVE-2026-33722 n8n: secrets vault bypass exposes credentials to low-priv users 5.3 Mar 25, 2026 MEDIUM CVE-2026-33720 n8n: OAuth state forgery hijacks user credentials 4.2 Mar 25, 2026 HIGH CVE-2026-33713 n8n: SQLi in Data Table node, full DB compromise 8.8 Mar 25, 2026 HIGH CVE-2026-33696 n8n: Prototype pollution enables RCE via workflow nodes 8.8 Mar 25, 2026 HIGH CVE-2026-33665 n8n: LDAP email match enables permanent account takeover 8.2 Mar 25, 2026 CRITICAL CVE-2026-33663 n8n: member role steals plaintext HTTP credentials 10.0 Mar 25, 2026 CRITICAL CVE-2026-33660 TensorFlow: type confusion NPD in tensor conversion 10.0 Mar 25, 2026 MEDIUM CVE-2026-27496 n8n: uninitialized buffer leaks secrets via Task Runner 6.5 Mar 25, 2026 MEDIUM CVE-2026-27578 n8n: XSS enables session hijacking 5.4 Feb 25, 2026 CRITICAL CVE-2026-27577 n8n: Code Injection enables RCE 9.9 Feb 25, 2026 HIGH CVE-2026-27498 n8n: Code Injection enables RCE 8.8 Feb 25, 2026 HIGH CVE-2026-27497 n8n: SQL Injection exposes database 8.8 Feb 25, 2026 CRITICAL CVE-2026-27495 n8n: Code Injection enables RCE 9.9 Feb 25, 2026 CRITICAL CVE-2026-27494 n8n: security flaw enables exploitation 9.9 Feb 25, 2026 CRITICAL CVE-2026-27493 n8n: Code Injection enables RCE 9.0 Feb 25, 2026 MEDIUM CVE-2026-25631 n8n: Input Validation flaw enables exploitation 6.5 Feb 6, 2026 HIGH CVE-2026-21893 n8n: Input Validation flaw enables exploitation 7.2 Feb 4, 2026 CRITICAL CVE-2026-25115 n8n: Protection Bypass circumvents security controls 9.9 Feb 4, 2026 HIGH CVE-2026-25056 n8n: Arbitrary File Upload enables RCE 8.8 Feb 4, 2026 HIGH CVE-2026-25055 n8n: Path Traversal enables file access 8.1 Feb 4, 2026 MEDIUM CVE-2026-25054 n8n: XSS enables session hijacking 5.4 Feb 4, 2026

Showing 176–200 of 229

← Previous Next →

Frequently asked questions

What is n8n?

n8n is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the npm ecosystem.

How many known vulnerabilities does n8n have?

n8n has 229 known CVEs, 24 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is n8n distributed in?

n8n is distributed via the npm ecosystem and categorized as ai agents.

Where does the n8n vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of n8n?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor n8n in your stack

Get instant alerts when new vulnerabilities affect n8n. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring