n8n@1.53.1

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the HTML preview, which renders execution output into an iframe srcdoc without the sandbox attribute. An attacker can execute arbitrary scripts in the context of the application by injecting malicious content, allowing them to perform actions as the victim, such as calling authenticated APIs using the victim's session.

Note: This is only exploitable if a user with global:member privileges opens the preview.

Upgrade n8n to version 1.123.64, 2.29.8, 2.30.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the Resource Locator component when the cachedResultUrl parameter is passed to window.open without proper scheme validation. An attacker can execute arbitrary scripts in the context of the victim's browser by crafting a workflow with a malicious scheme in cachedResultUrl and convincing a user with workflow access to interact with external links.

Upgrade n8n to version 1.123.64, 2.29.8, 2.30.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the process that handles HTTP header credentials in LLM sub-node execution data. An attacker can obtain sensitive API keys and secrets by accessing workflow execution records where these credentials are stored in plaintext.

Note: This is only exploitable if an authenticated user has access to execution data that includes unmasked header values.

Upgrade n8n to version 1.123.64, 2.29.8, 2.30.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE /${restEndpoint}/test-webhook/:id endpoint being registered before authentication middleware is applied. An attacker can disrupt active test webhook sessions by sending unauthenticated requests to cancel any user's active test webhook registration if the workflow ID is known.

Upgrade n8n to version 2.27.4 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the run_node_tool function in the agents module. An attacker can gain unauthorized access to credential secrets and execute arbitrary nodes by interacting with an agent that has node tools enabled, bypassing proper authorization checks.

Upgrade n8n to version 2.29.8, 2.31.0 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the authentication when the embed login feature is enabled and at least one trusted key source is configured. An attacker can gain unauthorized access to any existing user account by presenting a validly-signed token with an unverified email claim from a trusted issuer.

Note: This is only exploitable if the embed login feature is enabled and at least one trusted key source is configured.

Upgrade n8n to version 2.31.5, 2.32.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the process that handles credential domain restrictions when user-supplied base or endpoint URLs are set. An attacker can exfiltrate credential secrets by configuring affected nodes to send secrets to an attacker-controlled host.

Note: This is only exploitable if a credential has domain restrictions configured and is shared with non-owner users.

Upgrade n8n to version 2.31.5, 2.32.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the SSO instance-role provisioning. An attacker can gain full administrative privileges by manipulating the instance-role claim issued by the Identity Provider (IdP) during authentication.

Note: This is only exploitable if Enterprise SSO is configured, instance-role provisioning is enabled via the N8N_SSO_SCOPES_PROVISION_INSTANCE_ROLE flag, and the attacker can control the value of the instance-role claim from the IdP.

Upgrade n8n to version 1.123.64, 2.29.8, 2.30.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the JS task runner. An attacker can impact the confidentiality, integrity, or availability of other users' executions by poisoning the shared module cache.

Note: This is only exploitable if the instance is multi-user and the JS task runner is configured with built-in or external modules enabled.

Upgrade n8n to version 1.123.67, 2.31.5, 2.32.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') via the legacy expression evaluator's computed-member sanitizer. An attacker can achieve host-level code execution by bypassing input sanitization as an authenticated user with workflow create or modify permissions.

Note: This is only exploitable if the legacy expression engine is enabled as the default engine.

Upgrade n8n to version 1.123.64, 2.29.8, 2.30.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the Token Exchange process. An attacker can gain elevated privileges and execute arbitrary code by obtaining a valid external JWT accepted by a configured trusted key, which allows invoking administrator-only Public API operations such as role escalation, user creation, and user deletion.

Note: This is only exploitable if both the Token Exchange feature and the Public API are enabled, and the attacker can obtain an external JWT trusted by a configured issuer. Role escalation additionally requires an Advanced Permissions license; Community Package installation additionally requires both N8N_COMMUNITY_PACKAGES_ENABLED=true and N8N_UNVERIFIED_PACKAGES_ENABLED=true.

Upgrade n8n to version 2.29.8, 2.30.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) in the /rest/dynamic-node-parameters/ endpoint due to insufficient authorization checks and the ability to supply an absolute URL in the routing configuration. An attacker can access internal network resources by making the server issue HTTP requests to arbitrary internal targets.

Note: This is only exploitable if SSRF protection is disabled (N8N_SSRF_PROTECTION_ENABLED=false). This is the default setting.

Upgrade n8n to version 1.123.64, 2.29.8, 2.30.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via a mismatch between static validation and the runtime expression engine in external secrets handling. An attacker can access unauthorized secret values by embedding external secret references into credentials that bypass static validation, which are then resolved during workflow execution.

Note: This is only exploitable if an external secrets provider is configured and Advanced Permissions are enabled.

Upgrade n8n to version 1.123.61, 2.27.4, 2.28.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Improper Restriction of Communication Channel to Intended Endpoints via the AI Agents MCP verifier in packages/cli/src/modules/agents/builder/agents-builder-tools.service.ts. An attacker can send the agent to an arbitrary MCP server URL and cause a shared credential’s secret to be sent to a server they control by running an AI Agent with a member-shared credential that has domain restrictions. This affects deployments with the AI Agents module enabled and credentials shared with member-level users. The vulnerable MCP request path did not enforce the credential’s allowed-domain restriction, so the agent could make outbound requests that exposed the credential outside the intended set of domains.

Notes

• The advisory’s affected deployments are narrower than “AI Agents enabled” alone: it only applies when N8N_ENABLED_MODULES=agents is set and a credential with an Allowed HTTP Request Domains restriction has been shared to a member-level user.
• The credential exfiltration path is through the AI Agents MCP connector’s verifier, so the issue sits in the outbound MCP tool-check flow rather than general agent execution or other credential-sharing paths.

Workarounds

• Disable the AI Agents module by removing agents from N8N_ENABLED_MODULES; this prevents member users from using the MCP connector path that can send a shared credential secret to an arbitrary server.
• Restrict credential sharing to fully trusted users only; this limits exposure of domain-restricted credentials to users who could misuse the MCP tool to exfiltrate secrets.
• Audit credentials with domain restrictions for unexpected sharing relationships; this helps identify and remove shares that could allow the bypass to be exercised.

Upgrade n8n to version 2.27.4, 2.28.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to User Impersonation via the token-exchange identity-resolution service in packages/cli/src/modules/token-exchange/services/identity-resolution.service.ts. An attacker can authenticate as another user by presenting a valid token from one trusted issuer whose JWT sub matches a victim account created under a different trusted issuer. The token-exchange flow resolves local identities using the subject claim alone instead of pairing it with the issuer, so instances that trust more than one external issuer can map two different upstream accounts to the same local account. This lets the attacker access the victim’s n8n account and its data and actions with the victim’s permissions.

Notes

• The issue only applies when token exchange is enabled, and an instance trusts more than one external issuer; a single trusted issuer does not create the cross-issuer account-collision condition described in the advisory.
• The collision is between identities stored under the token-exchange provider mapping, so the vulnerable path is the external-identity binding used during exchange rather than general n8n login or local user authentication.

Workarounds

• If multiple trusted issuers are not required, reduce the token exchange configuration to a single trusted issuer to prevent cross-issuer subject collisions from binding two external accounts to the same local account.
• Disable the token exchange feature entirely if it is not in active use to block the token-exchange authentication path that can be abused for account misbinding.

Upgrade n8n to version 2.27.4, 2.28.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the MulterUploadMiddleware in the data-table upload path. An authenticated user can repeatedly upload CSV files to the data-table endpoint by sending requests that are accepted by the per-request file-size check but do not account for files already written to the shared temporary upload directory. Those orphaned uploads accumulate on disk until cleanup runs, allowing the attacker to consume the host’s temporary storage and disrupt file uploads and other operations that depend on available disk space.

Notes

• The vulnerable path is the authenticated data-table CSV upload flow backed by the shared temporary upload directory; the quota decision only considered the current request, so accumulated orphaned files from prior uploads were not counted toward the budget.
• The issue is tied to deployments using the data-table storage budget in MulterUploadMiddleware rather than generic file uploads elsewhere in n8n.

Workarounds

• Restrict access to the n8n instance to fully trusted users only; this reduces the chance that an authenticated but untrusted user can repeatedly upload CSV files and fill the shared temporary upload directory.
• Set uploadMaxFileSize to a low value; this limits the size of each individual upload and reduces how quickly a user can consume temporary disk space with repeated uploads.
• Monitor and alert on disk usage in the n8n temporary upload directory; this helps detect growing orphaned uploads before temporary storage exhaustion disrupts uploads and other disk-dependent operations.

Upgrade n8n to version 1.123.58, 2.28.0 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) n the credential management flow, where the Authorization URL field of an OAuth2 credential accepts a javascript: URL that is not sanitized before being wired to the OAuth authorization button. A user with permission to create and share credentials can execute arbitrary JavaScript in another user's browser session by embedding such a URL in a shared OAuth2 credential, which runs when the victim opens the credential and activates the authorization button. Exploitation requires the attacker to hold credential creation and sharing permissions and the victim to open the shared credential and interact with the authorization button.

Upgrade n8n to version 2.6.4, 2.8.0 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the evaluations test run creation endpoint (POST /workflows/{workflowId}/test-runs/new), which authorizes against the workflow:read scope instead of workflow:execute. A user with read-only workflow:read access to a workflow can trigger a real evaluation test run that executes the workflow through the internal runner by calling this endpoint, producing unintended outbound API calls, data mutations, or other side effects in connected systems. Exploitation affects instances with the Evaluations feature active and RBAC project roles in use, where a user holds workflow:read without workflow:execute.

Upgrade n8n to version 1.123.55, 2.25.7, 2.26.2 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to SQL Injection in the MySQL v1 node's executeQuery operation, which interpolates evaluated {{ ... }} expression values directly into raw SQL strings without parameterization. An attacker can execute arbitrary SQL against the connected database, with the privileges of the configured MySQL account, by supplying data to an externally reachable trigger such as a Webhook node whose value is interpolated into the query. Exploitation requires a workflow that uses the MySQL v1 node's executeQuery with expression interpolation wired to an externally reachable trigger, and the impact is bounded by the privileges of that database account.

Upgrade n8n to version 1.123.61, 2.27.4, 2.28.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the evaluation test runs controller, where three state-changing endpoints authorize actions against the workflow:read permission instead of the action-appropriate workflow:execute scope. A user with the read-only project:viewer role can start new evaluation test runs, cancel in-flight runs, or delete run records on workflows they only have read access to by calling those endpoints. Exploitation affects only instances with Advanced Permissions (Enterprise or Cloud) where projects and viewer roles are in use.

Upgrade n8n to version 1.123.55, 2.25.7, 2.26.2 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to User Impersonation in the ZendeskTrigger node, which does not validate the HMAC-SHA256 signature on incoming webhook requests from Zendesk. An attacker can trigger workflows with forged payloads by sending unsigned POST requests carrying arbitrary data to the webhook URL, since the signature is never verified. Exploitation requires knowledge of the webhook URL, and the impact is bounded by what the triggered workflow does with the forged payload in connected systems.

Upgrade n8n to version 1.123.18, 2.6.2 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the Public API execution retry endpoint, which authorizes the request against the workflow:read permission instead of workflow:execute. A user with only workflow:read access to a shared workflow can run workflow retries they are not permitted to execute by calling the Public API retry endpoint. Exploitation requires the workflow to be shared with the user or across projects, and the retry runs the workflow, which can read data or change state within that workflow's scope.

Upgrade n8n to version 2.25.7, 2.26.2 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in workflow creation folder assignment, which does not verify that the requested target folder belongs to a project the requester is allowed to access. A user with workflow creation permission in one project can associate a newly created workflow with a folder belonging to a different project they cannot access by submitting a crafted creation request. Exploitation requires multi-project and folder support to be enabled, and the impact is confined to a logical integrity violation of the target project's folder structure at the database level, since the workflow stays in the requester's project, remains invisible to the target project, and exposes no target project data.

Upgrade n8n to version 2.28.0 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Arbitrary Code Execution in the Python Code node, exploitable when the Python Task Runner is enabled. A user with permission to create or modify workflows can execute arbitrary code on the task runner container by escaping the sandbox from within a Python Code node. Exploitation requires an authenticated user with workflow edit permission and a self-hosted instance running the Python Task Runner.

Upgrade n8n to version 1.123.48, 2.21.8, 2.22.4 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs for the Python Code node when the Python Task Runner is enabled. A user with permission to create or modify workflows can evade the validator and reach the task executor module namespace by authoring Python in that node, and on instances configured with N8N_BLOCK_RUNNER_ENV_ACCESS=false can read environment variables available to the task runner process. Exploitation is limited to self-hosted instances with the Python Task Runner enabled, and the environment variable disclosure applies only when N8N_BLOCK_RUNNER_ENV_ACCESS=false.

Upgrade n8n to version 2.25.7, 2.26.2 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) through the Respond to Webhook binary response path in the webhook response handling code. An authenticated workflow editor can configure a public webhook to return attacker-controlled binary content and Content-Type, causing the response to execute JavaScript in the n8n origin when an authenticated user visits the webhook URL and exposing that user’s session.

Workarounds

• Limit workflow creation and editing permissions to fully trusted users only, so untrusted users cannot configure a Respond to Webhook node to serve attacker-controlled binary content and Content-Type.
• Disable the Respond to Webhook node by adding n8n-nodes-base.respondToWebhook to the NODES_EXCLUDE environment variable, which prevents use of the vulnerable binary response path.

Upgrade n8n to version 1.123.55, 2.25.7, 2.26.2 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the shared workflows. An attacker can gain unauthorized access to credentials belonging to other users by exploiting insufficient ownership checks via specific public API endpoints.

Upgrade n8n to version 1.123.55, 2.25.7, 2.26.2 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the OAuth1 and OAuth2 credential reconnect endpoints. A user with readonly access to shared credentials can overwrite stored OAuth token material for the shared credentials by initiating a reconnect flow with an external account they control, causing workflows to execute under the attacker's OAuth identity and enabling data exfiltration to attacker-controlled external services and persistent takeover of shared integrations.

Upgrade n8n to version 1.123.43, 2.20.7-exp.0, 2.21.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Prototype Pollution via the xml2js used for parsing XML request bodies in webhook handlers. An authenticated attacker with permission to create or modify workflows could exploit this to pollute the JavaScript object prototype and, by chaining the pollution with the Git node's SSH operations, achieve remote code execution on the n8n host.

Upgrade n8n to version 1.123.32, 2.17.4, 2.18.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the MCP OAuth client registration process. An attacker can exhaust server memory resources and render the instance unavailable by sending large unauthenticated registration payloads to the endpoint, which accepts requests regardless of MCP access settings.

A fix was pushed into the master branch but not yet published.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Missing Authorization via the dynamic-node-parameters endpoints. An attacker can access and exfiltrate sensitive credentials belonging to other users by supplying a foreign credential ID in the request body, causing the backend to decrypt and use those credentials in a helper execution path where the attacker also controls the destination URL.

Upgrade n8n to version 1.123.33, 2.17.5 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Missing Authorization via the /chat WebSocket endpoint when authentication is set to None and a workflow execution is in a waiting state. An attacker can gain unauthorized access to workflow executions and influence downstream workflow behavior by attaching to an execution using a discovered execution ID and submitting arbitrary input.

Note: This is only exploitable if the Hosted Chat workflow is publicly exposed with authentication set to None, a target execution is in a waiting state, and the attacker can obtain the execution ID.

Upgrade n8n to version 1.123.32, 2.17.4, 2.18.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the /rest/binary-data endpoint when serving HTML binary data objects without a filename, as the response lacks Content-Disposition and Content-Security-Policy headers. An attacker can execute arbitrary JavaScript in the context of a higher-privileged user's authenticated session by sending a crafted URL, potentially leading to exfiltration or modification of sensitive data, or privilege escalation.

Upgrade n8n to version 1.123.27, 2.13.3, 2.14.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Prototype Pollution via the GSuiteAdmin node parameter. An attacker with permissions to create or modify workflows can execute arbitrary code by supplying crafted parameters that pollute Object.prototype during workflow creation or modification.

Upgrade n8n to version 1.123.27, 2.13.3, 2.14.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to SQL Injection in the orderByColumn expression of the Data Table Get node. An attacker with permissions to create or modify workflows can execute arbitrary SQL commands by supplying crafted input, potentially leading to unauthorized data access, modification, or deletion.

Note: This is only exploitable if the Data Table node is enabled.

Upgrade n8n to version 1.123.27, 2.13.3, 2.14.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Arbitrary Code Injection via the Merge node's Combine by SQL mode. An authenticated user with permissions to create or modify workflows can execute arbitrary code and access sensitive files on the host by crafting malicious SQL statements when creating or modifying workflows.

Upgrade n8n to version 1.123.27, 2.13.3, 2.14.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization when saving credentials. An authenticated user can access plaintext values of secrets stored in external vaults by referencing a secret's external name in a credential, bypassing intended permission checks.

Note: This is only exploitable if an external secrets vault is configured and the attacker knows or can guess the name of a target secret.

Upgrade n8n to version 1.123.23, 2.6.4 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the Source Control feature when configured to use SSH, as the SSH command disables host key verification. An attacker can intercept repository data or inject malicious content by performing a man-in-the-middle attack between the affected instance and the remote Git server.

Upgrade n8n to version 2.5.0 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to User Impersonation in the account linking when LDAP authentication is enabled. An attacker can gain unauthorized access to another user's account, including administrative accounts, by setting their LDAP email attribute to match the target user's email. This linkage persists even if the LDAP email is later changed, resulting in permanent unauthorized access.

Upgrade n8n to version 1.121.0 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Incorrect Authorization in the OAuth callback when the N8N_SKIP_AUTH_ON_OAUTH_CALLBACK environment variable is set to true. An attacker can gain unauthorized access to OAuth tokens by tricking a victim into completing an OAuth flow against a credential object controlled by the attacker, allowing the attacker to execute workflows as the victim.

Upgrade n8n to version 2.6.4, 2.7.3 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the Credential Management Flow when a crafted OAuth2 credential contains a JavaScript URL in the Authorization URL field. An attacker can execute arbitrary scripts in the victim's browser session by convincing an authenticated user with permission to create and share credentials to interact with the OAuth authorization button.

Upgrade n8n to version 2.6.4, 2.8.0 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Improper Authentication via the Self-Service Settings API. An attacker can circumvent centralized identity management and multi-factor authentication by disabling SSO enforcement for their own account and creating local credentials after authenticating through SSO.

Upgrade n8n to version 2.8.0 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Command Injection in the community package installation functionality. An attacker can execute arbitrary system commands by supplying crafted input as an authenticated user with administrative permissions.

Note:

This is only exploitable if the attacker has administrative access to the instance and is permitted to install third-party community packages.

Upgrade n8n to version 1.119.2, 1.120.3 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the Respond to Webhook node when it responds with HTML content containing executable scripts. An attacker can execute arbitrary JavaScript in the context of the editor interface by crafting a malicious workflow to bypass the sandbox, leading to unauthorized reading or modification of workflow data, insertion of malicious logic, or exfiltration of sensitive information from within an authenticated session.

n8n-auth session cookies are not exposed by this vulnerability.

Upgrade n8n to version 1.114.0 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Command Injection via the Execute Command node. An attacker can execute arbitrary commands on the host system by leveraging access to an authenticated user account, potentially leading to data exfiltration, service disruption, or full system compromise.

Note:

This is only exploitable if the Execute Command node is enabled and not all user accounts are strictly controlled and trusted.

This issue does not impact n8n.cloud.

As per maintainers' memo: "No code changes have been made to alter the behavior of the Execute Command node. The recommended mitigation is to disable the node by default in environments where it is not explicitly required. Future n8n versions may change the default availability of this node."

##Workaround

This vulnerability can be mitigated by disabling the Execute Command node before n8n start using the environment variable: export NODES_EXCLUDE: "[\"n8n-nodes-base.executeCommand\"]".

There is no fixed version for n8n.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Missing Authorization over the /rest/executions/:id/stop endpoint, which can execute stop a workflow operation on workflows not owned by the user. Long-running and time-sensitive workflows are particularly vulnerable.

Upgrade n8n to version 1.99.1 or higher.

n8n is a n8n Workflow Automation Tool

Affected versions of this package are vulnerable to Uncaught Exception via the /rest/binary-data endpoint when handling empty filesystem URIs. An authenticated attacker can cause resource exhaustion and disrupt service availability by sending specially crafted GET requests with empty filesystem:// or filesystem-v2:// URIs to the affected endpoint.

Upgrade n8n to version 1.99.0 or higher.