N8n: 16 Vulnerabilities Including RCE and SQLi Disclosed in Single Batch
N8n users face critical risks as 16 vulnerabilities, including SQL injection, RCE, and credential bypasses, were disclosed on August 11, 2026.
Key findings
- A batch of 16 vulnerabilities in N8n, disclosed on August 11, 2026, includes multiple high-severity flaws.
- Vulnerabilities span SQL injection, credential bypass, RCE, path traversal, and prototype pollution across various N8n nodes.
- Exploitable flaws include credential authorization bypass, sandbox escapes, and SSRF protection bypasses.
- All disclosed issues are resolved in N8n versions 1.123.67, 2.31.5, and 2.32.1.
- Users are urged to update immediately to prevent exploitation of these diverse security weaknesses.
On August 11, 2026, a significant batch of 16 vulnerabilities was disclosed for N8n, an open-source workflow automation tool. These vulnerabilities, all disclosed on the same day, span a range of severity levels, including multiple high-severity flaws, and affect various nodes and features within the N8n platform. The disclosures highlight potential risks including SQL injection, credential access bypass, path traversal, remote code execution, and prototype pollution, underscoring the need for users to update their N8n instances promptly.
Several vulnerabilities center on improper handling of user-supplied input, leading to common web attack vectors. CVE-2026-72775 and CVE-2026-72750 detail SQL injection flaws in the Postgres and Snowflake nodes, respectively. These vulnerabilities arise from the interpolation of user-supplied identifier parameters or expression values directly into SQL statements without adequate escaping. An authenticated user with the ability to craft workflow expressions could exploit these to inject arbitrary SQL.
Security concerns also extend to authorization and access control bypasses. CVE-2026-72774 describes a credential authorization bypass in the HTTP Request node, where an authenticated user with edit access to a shared workflow can reference another user's credential. Similarly, CVE-2026-72763 points to a flaw in the Execute Sub-workflow node, where credential access is not validated for credentials referenced within inline workflow JSON, allowing editors to access target credentials by their ID. CVE-2026-72772, a high-severity account takeover vulnerability, affects the Token Exchange Embed Login feature, failing to verify email claims or trusted key roles when matching tokens to local accounts.
Path traversal and arbitrary file write vulnerabilities are also present. CVE-2026-72773 details a path-confinement bypass in the @n8n/computer-use file-search tool, allowing crafted search patterns to access files outside the configured directory. CVE-2026-72770 describes a path traversal vulnerability in the Git node, enabling authenticated users to bypass repository-path containment checks. Furthermore, CVE-2026-72762 highlights an arbitrary file write vulnerability in the Edit Image node due to unvalidated output format parameters.
Remote code execution (RCE) and sandbox escape vulnerabilities pose significant threats. CVE-2026-72769 and CVE-2026-72749 both involve prototype pollution, the former in the VM expression engine and the latter in the Edit Fields (Set) node, allowing authenticated users to corrupt shared data or pollute prototypes. CVE-2026-72767 details an RCE vulnerability in the Git node, where a crafted local repository can trigger git hooks to execute arbitrary commands. A critical sandbox escape vulnerability, CVE-2026-72765, allows authenticated users to bypass the expression sandbox using arrow-function bodies, leading to system command execution. CVE-2026-72771 highlights a bypass of the Allowed HTTP Request Domains allowlist in AI/LLM nodes, enabling redirection of requests to attacker-controlled hosts.
Other notable vulnerabilities include CVE-2026-72766, a type confusion issue in the Send Email node where non-string values in message fields can be misinterpreted, and CVE-2026-72768, a server-side request forgery (SSRF) protection bypass in the MCP Client node. Lastly, CVE-2026-72764 describes a module cache poisoning vulnerability in the JavaScript task runner, affecting other users' Code-node executions.
All disclosed vulnerabilities are addressed in N8n versions 1.123.67, 2.31.5, and 2.32.1. Users are strongly advised to update to these patched versions to mitigate the risks associated with these numerous security flaws. The coordinated disclosure of these 16 CVEs on a single day emphasizes the importance of timely patching for N8n users to maintain the security and integrity of their workflow automation systems.
The batch of vulnerabilities was disclosed on August 11, 2026. The affected versions of N8n are prior to 1.123.67, 2.31.5, and 2.32.1. All vulnerabilities have been fixed in N8n versions 1.123.67, 2.31.5, and 2.32.1.
Key findings include:
- A batch of 16 vulnerabilities in N8n, disclosed on August 11, 2026, includes multiple high-severity flaws.
- Vulnerabilities span SQL injection, credential bypass, RCE, path traversal, and prototype pollution across various N8n nodes.
- Exploitable flaws include credential authorization bypass, sandbox escapes, and SSRF protection bypasses.
- All disclosed issues are resolved in N8n versions 1.123.67, 2.31.5, and 2.32.1.
- Users are urged to update immediately to prevent exploitation of these diverse security weaknesses.
- The disclosures highlight risks in nodes such as Postgres, Snowflake, Git, HTTP Request, and AI/LLM integrations.
- Prototype pollution and type confusion vulnerabilities affect core expression and node functionalities.
- Path traversal and arbitrary file write vulnerabilities impact file handling and Git operations.