CVE Intelligence

Vulnerabilidades do N8n-io N8n

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam N8n-io N8n: 183 registro(s), com versões afetadas e correções.

CVE-2026-21858 Crítica · 10.0 Exploit público CWE-20 07/01/2026
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the system and may enable further compromise depending on deployment configuration and workflow usage. This issue is fixed in version 1.121.0.
CVE-2025-68697 Média · 5.4 CWE-269 26/12/2025
Self-hosted n8n has Legacy Code node that enables arbitrary file read/write
n8n is an open source workflow automation platform. Prior to version 2.0.0, in self-hosted n8n instances where the Code node runs in legacy (non-task-runner) JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions from within the Code node. This allows a workflow editor to perform actions on the n8n host with the same privileges as the n8n process, including: reading files from the host filesystem (subject to any file-access restrictions configured on the instance and OS/container permissions), and writing files to the host filesystem (subject to the same restrictions). This issue has been patched in version 2.0.0. Workarounds for this issue involve limiting file operations by setting N8N_RESTRICT_FILE_ACCESS_TO to a dedicated directory (e.g., ~/.n8n-files) and ensure it contains no sensitive data, keeping N8N_BLOCK_FILE_ACCESS_TO_N8N_FILES=true (default) to block access to .n8n and user-defined config files, and disabling high-risk nodes (including the Code node) using NODES_EXCLUDE if workflow editors are not fully trusted.
CVE-2025-68668 Crítica · 9.9 CWE-693 26/12/2025
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0. Workarounds for this issue involve disabling the Code Node by setting the environment variable NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables.
CVE-2025-61914 Média · 5.4 CWE-79 26/12/2025
n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox
n8n is an open source workflow automation platform. Prior to version 1.114.0, a stored Cross-Site Scripting (XSS) vulnerability may occur in n8n when using the “Respond to Webhook” node. When this node responds with HTML content containing executable scripts, the payload may execute directly in the top-level window, rather than within the expected sandbox introduced in version 1.103.0. This behavior can enable a malicious actor with workflow creation permissions to execute arbitrary JavaScript in the context of the n8n editor interface. This issue has been patched in version 1.114.0. Workarounds for this issue involve restricting workflow creation and modification privileges to trusted users only, avoiding use of untrusted HTML responses in the “Respond to Webhook” node, and using an external reverse proxy or HTML sanitizer to filter responses that include executable scripts.
CVE-2025-68613 Alta · 8.8 KEV Urgente · 76 Exploit público CWE-913 19/12/2025
n8n Controle Impróprio de Recursos de Código Gerenciados Dinamicamente (RCE via Expressões de Workflow)
n8n é uma plataforma de automação de workflows de código aberto. As versões a partir de 0.211.0 e anteriores a 1.120.4, 1.121.1 e 1.122.0 contêm uma vulnerabilidade crítica de Execução Remota de Código (RCE) no sistema de avaliação de expressões de workflows. Em certas condições, expressões fornecidas por usuários autenticados durante a configuração de workflows podem ser avaliadas em um contexto de execução que não está suficientemente isolado do ambiente de execução subjacente. Um atacante autenticado poderia explorar esse comportamento para executar código arbitrário com os privilégios do processo n8n. A exploração bem-sucedida pode levar ao comprometimento total da instância afetada, incluindo acesso não autorizado a dados sensíveis, modificação de workflows e execução de operações em nível de sistema. Este problema foi corrigido nas versões 1.120.4, 1.121.1 e 1.122.0. Recomenda-se fortemente que os usuários façam a atualização para uma versão corrigida, que introduz salvaguardas adicionais para restringir a avaliação de expressões. Caso a atualização não seja possível imediatamente, os administradores devem considerar as seguintes medidas temporárias: limitar as permissões de criação e edição de workflows apenas a usuários totalmente confiáveis; e/ou implantar o n8n em um ambiente reforçado, com privilégios restritos do sistema operacional e acesso de rede restrito, para reduzir o impacto de uma possível exploração. Esses paliativos não eliminam totalmente o risco e devem ser usados apenas como medidas de curto prazo.
CVE-2025-65964 Alta · 8.8 CWE-829 08/12/2025
n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook
n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git configuration values, including core.hooksPath, which can point to a malicious Git hook that executes arbitrary commands on the n8n host during subsequent Git operations. Exploitation requires the ability to create or modify an n8n workflow using the Git node. This issue is fixed in version 1.119.2. Workarounds include excluding the Git Node (Docs) and avoiding cloning or interacting with untrusted repositories using the Git Node.
CVE-2025-62726 Alta · 8.8 CWE-829 30/10/2025
n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook
n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigger the hook’s execution. This allows attackers to execute arbitrary code within the n8n environment, potentially compromising the system and any connected credentials or workflows. This vulnerability is fixed in 1.113.0.
CVE-2025-58177 Média · 5.4 CWE-79 15/09/2025
n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameter
n8n is an open source workflow automation platform. From 1.24.0 to before 1.107.0, there is a stored cross-site scripting (XSS) vulnerability in @n8n/n8n-nodes-langchain.chatTrigger. An authorized user can configure the LangChain Chat Trigger node with malicious JavaScript in the initialMessages field and enable public access so that the payload is executed in the browser of any user who visits the resulting public chat URL. This can be used for phishing or to steal cookies or other sensitive data from users accessing the public chat link. The issue is fixed in version 1.107.0. Updating to 1.107.0 or later is recommended. As a workaround, the affected chatTrigger node can be disabled. No other workarounds are known.