VYPR
Vypr IntelligenceAI-generatedOct 14, 2026· 14 CVEs

N8n: 14 Vulnerabilities Including Auth Bypass and Code Execution Disclosed Together

N8n Io faces a critical security event with 14 disclosed vulnerabilities, including authorization bypasses, code execution, and XSS, patched in versions 1.123.83, 2.41.4, and 2.42.1.

Key findings

  • 14 vulnerabilities disclosed for N8n on October 14, 2026, affecting multiple versions.
  • High-severity flaws include authorization bypass, code execution, and SQL injection.
  • Patches are available in N8n versions 1.123.83, 2.41.4, and 2.42.1.
  • Vulnerabilities impact agent interactions, workflow execution, and data handling.
  • Stored XSS and prototype pollution flaws also present significant risks.

On October 14, 2026, a significant batch of 14 vulnerabilities was disclosed for N8n, an open-source automation tool. These vulnerabilities, spanning multiple versions including pre-1.123.83, pre-2.41.4, and pre-2.42.1, were all published on the same day, indicating a coordinated disclosure event. The disclosures highlight a range of security weaknesses, including authorization bypasses, cross-site scripting (XSS), prototype pollution, SQL injection, and code execution, with several rated as High severity. These issues collectively pose a substantial risk to N8n users, potentially allowing unauthorized access, data manipulation, and execution of malicious code within their workflows.

Several vulnerabilities revolve around authorization bypass mechanisms. CVE-2026-110853 and CVE-2026-110844 detail how authenticated users can spoof workflow identities or embed credentials in sub-workflows to access restricted project resources. CVE-2026-110852 describes an authentication bypass in dynamic-path webhook resolution, where omitting a server-generated identifier could allow unauthenticated access. Additionally, CVE-2026-110851 and CVE-2026-110841 point to authorization flaws in agent-related endpoints, allowing manipulation or access to agents and conversations belonging to other users. CVE-2026-110846 presents a signature bypass in the waiting-webhook endpoint, enabling attackers with a resume token to approve unintended executions.

Other critical vulnerabilities include code execution and data manipulation risks. CVE-2026-110845 allows for code execution via the Git node's Log operation by failing to strip local git configurations. CVE-2026-110840 describes an SQL injection vulnerability in the Microsoft SQL node (version 1), enabling external entities to manipulate SQL queries when untrusted input is used. Furthermore, CVE-2026-110843 highlights an uncontrolled resource consumption vulnerability in the OAuth authorize endpoint, potentially exploitable by unauthenticated attackers.

Security flaws related to data integrity and script execution were also identified. CVE-2026-110849, a stored XSS vulnerability in the file-preview modal, allows authenticated users to inject scripts that execute within the N8n origin when others preview their uploaded files. Similarly, CVE-2026-110847 details a stored XSS vulnerability in the Chat Trigger hosted-chat page, where custom CSS values are not properly sanitized, enabling workflow authors to execute scripts in the context of N8n users.

Prototype pollution vulnerabilities were found in two distinct areas. CVE-2026-110848 affects the AI workflow builder, where merging workflow connections without checking reserved keys can be exploited by authenticated users. CVE-2026-110842 targets the MCP workflow-validation tool, allowing authenticated users with workflow:read permissions to potentially pollute shared prototypes by exploiting the interpreter's evaluation of caller-supplied code.

The disclosed vulnerabilities affect N8n versions prior to 1.123.83 for the 1.x branch, and prior to 2.41.4 for the 2.x branch, with specific mentions of 2.42.x versions being vulnerable up to 2.42.0 or 2.42.1. The patches are included in N8n versions 1.123.83, 2.41.4, and 2.42.1. Users are strongly advised to update to these patched versions to mitigate the risks associated with these numerous security flaws. The coordinated disclosure of these 14 vulnerabilities underscores the importance of timely patching and security diligence for users of the N8n automation platform.

Given the breadth of vulnerabilities, including authorization bypasses, code execution, and XSS, users should prioritize updating their N8n instances. The potential for authenticated users to access or modify resources outside their designated projects, or for unauthenticated users to gain access, necessitates immediate attention. Monitoring for any suspicious activity within workflows and credentials should be a key part of the response strategy.

The batch of vulnerabilities includes:

All 14 vulnerabilities were patched in N8n versions 1.123.83, 2.41.4, and 2.42.1. The vulnerabilities affect N8n versions prior to 1.123.83, 2.41.4, and 2.42.1. Multiple high-severity flaws including authorization bypass, code execution, and SQL injection were disclosed. N8n users are urged to update immediately to versions 1.123.83, 2.41.4, or 2.42.1. Stored XSS vulnerabilities exist in file preview modals and chat triggers. Prototype pollution flaws were found in the AI workflow builder and workflow validation tools. The disclosure event on October 14, 2026, included 14 distinct CVEs.

AI-written article. Grounded in 14 CVE records listed below.