N
Vendor security profile
n8n-io
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs59
Critical0
CISA KEV0
Public exploit0
Patch rate%12
Avg. CVSS6.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
34
9
16
CVE KEV
CVE severity distribution
59toplam CVE
High34 (58%)
Medium24 (41%)
Low1 (2%)
Patch and exploitation view
%12
Verified patch
%0
CISA KEV
%0
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
52Unknown
Latest vulnerabilities
6.3
CVE-2026-103260
n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node
N
Patch status unknownEPSS %0
8.5
CVE-2026-103259
n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials
N
Patch status unknownEPSS %0
6.9
CVE-2026-103258
n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation
N
Patch status unknownEPSS %0
8.1
CVE-2026-103257
n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node
N
Patch status unknownEPSS %0
7.1
CVE-2026-103256
n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook
N
Patch status unknownEPSS %0
7.1
CVE-2026-103255
n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase
N
Patch status unknownEPSS %0
7.0
CVE-2026-103254
n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation
N
Patch status unknownEPSS %0
7.0
CVE-2026-103253
n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table
N
Patch status unknownEPSS %0
7.1
CVE-2026-103252
n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint
N
Patch status unknownEPSS %0
7.5
CVE-2026-103251
n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub
N
Patch status unknownEPSS %0