VYPR
Vypr IntelligenceAI-generatedAug 20, 2026· 18 CVEs

N8n: 18 Vulnerabilities Including Code Execution and SSRF Disclosed in Batch

N8n Io disclosed 18 vulnerabilities from August 18-20, 2026, including critical code execution, SSRF, and sandbox escape flaws, requiring urgent updates.

Key findings

  • 18 vulnerabilities disclosed for N8n between August 18-20, 2026, spanning multiple severity levels.
  • High-severity flaws include code execution in Git and SDK loader, arbitrary file read/write in Snowflake, and sandbox escapes.
  • Other issues include SSRF, XSS, filter injection, NoSQL injection, and authorization bypasses across various nodes.
  • Affected versions include N8n prior to 1.123.69, 2.33.4, and 2.34.1; patches are available.
  • Users are urged to update immediately to mitigate risks of data compromise and system control.

On August 20, 2026, a significant batch of 18 vulnerabilities was disclosed for N8n, the open-source workflow automation platform. These vulnerabilities, disclosed across August 18-20, 2026, span a range of severity levels, with a notable cluster of high-severity flaws impacting core functionalities. The disclosures highlight issues in various nodes and core components, including code execution, SSRF, XSS, and authorization bypasses, underscoring the need for users to update their N8n instances promptly.

Several high-severity vulnerabilities were identified in critical nodes and functionalities:

  • Code Execution: CVE-2026-77084 and CVE-2026-71539 detail code execution risks within the Git node. CVE-2026-77084 stems from the Git node executing malicious repository-local git configuration values. CVE-2026-71539 involves an authenticated user manipulating directory paths before cloning, leading to the loading of crafted repositories as custom JavaScript nodes. Additionally, CVE-2026-77068 points to a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader due to improper validation of path-traversal sequences.
  • Data Manipulation and Access: Arbitrary file read and write capabilities are present in the Snowflake node via CVE-2026-77080, where free-form input is passed directly to the Snowflake SDK without proper restrictions. CVE-2026-77071 describes a PostgREST filter injection vulnerability in the Supabase node, allowing attackers to widen filter queries. Furthermore, CVE-2026-77070 reveals a NoSQL injection vulnerability in the MongoDB node, where the Query parameter is parsed as JSON without sanitizing MongoDB operators.
  • Sandbox Escapes and Injection: CVE-2026-77083 and CVE-2026-77077 detail sandbox escape vulnerabilities in the JavaScript Code node's VM sandbox. These flaws allow authenticated users to pollute the Function.prototype or exploit prototype pollution via un-frozen internal module constructors like EventEmitter to execute arbitrary code. CVE-2026-77075 highlights an expression injection vulnerability in resource-locator field link preview rendering, where user-supplied values are directly spliced into URL templates.
  • Server-Side Request Forgery (SSRF) and Authorization Bypass: CVE-2026-77085 and CVE-2026-77069 describe SSRF protection bypasses. CVE-2026-77085 affects the SearXNG Agent tool, which uses a raw HTTP client that bypasses centralized SSRF protection. CVE-2026-77069 impacts the OAuth2 credential authorization-code-to-access-token exchange, which uses a separate client without SSRF protection. CVE-2026-77079 details an authorization bypass in the custom project role deletion path, where project-level authorization checks were missing during reassignment. CVE-2026-77073 involves a credential validation bypass in the MCP create_workflow_from_code tool.
  • Cross-Site Scripting (XSS) and Denial of Service (DoS): CVE-2026-77072 reports a stored XSS vulnerability in the Form node's completion page, where sandboxing policies were not consistently applied. CVE-2026-77082 describes a regular expression denial of service (ReDoS) vulnerability in the Filter and Switch nodes, stemming from user-supplied regex patterns executed without complexity validation. CVE-2026-77079 also mentions an information disclosure vulnerability in the GraphQL node, where underlying HTTP client errors containing live request details were re-thrown. CVE-2026-77074 details an SSRF vulnerability in the Edit Image node's Draw Text operation, allowing blind outbound HTTP requests or local file access.

The affected versions span across N8n's 1.x and 2.x release lines. Specifically, versions prior to 1.123.69, 2.33.4, and 2.34.1 are impacted by many of these vulnerabilities. Some specific fixes include:

The fixes are available in N8n versions 1.123.69, 2.33.4, 2.34.1, 2.29.8, 2.30.1, and later. Users are strongly advised to update to the patched versions to mitigate these risks.

This extensive batch of vulnerabilities underscores the importance of regular security audits and timely patching for workflow automation platforms like N8n. The variety of attack vectors, from code execution to data exfiltration and denial of service, highlights potential risks for organizations relying on N8n for their automated processes. Users should prioritize updating their instances to the latest secure versions to protect their data and systems. The disclosures were made in close proximity, indicating a coordinated disclosure event that warrants immediate attention from the N8n user community.

AI-written article. Grounded in 18 CVE records listed below.