Alertas de Seguridad de la Información

N Alto vulnerabilidad

09/07/2026

[CVE-2026-59206] n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authe…

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with the default workflow:create permission could pollute Object.prototype through a crafted workflow saved, updated, or imported via the workflow API, allowing unauthenticated requests to be treated as a privileged user and exposing user and project listing endpoints. This issue is fi…

nvdaltovulnerabilidad CVSS 7.1 NVD

N Alto vulnerabilidad

08/07/2026

[CVE-2026-59257] n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerabil…

n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerability in the legacy MySQL v1 node's executeQuery operation. The operation substitutes evaluated {{ ... }} expression values directly into the raw SQL string without parameterization. When a workflow uses this operation with expression-sourced values and is connected to an externally-reachable trigger …

nvdaltovulnerabilidad CVSS 8.8 NVD

N Alto vulnerabilidad

08/07/2026

[CVE-2026-56776] n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{wor…

n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/new endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access to a workflow can trigger a real evaluation test run, causing the workflow to execute via the internal workflow runner and resulting in unin…

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

04/07/2026

[CVE-2025-71380] The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host…

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading to data exfiltration, service disruption, or complete system compromise.

nvdaltovulnerabilidad CVSS 8.8 NVD

N Alto vulnerabilidad

24/06/2026

[CVE-2026-56351] n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft …

n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to inject arbitrary SQL through unescaped identifier values in node configuration parameters. Attackers with workflow creation permissions can supply specially crafted table or column names to execute unauthorized database commands and compromise data integr…

nvdaltovulnerabilidad CVSS 8.2 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-54307] n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-…

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks were only enforced partially leading to cross-user credential access. This issue affects instances where workflow sharing is enabled and at le…

nvdcriticovulnerabilidad CVSS 9.6 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-54308] n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent36…

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent365Trigger and StripeTrigger node did not validate that inbound requests. As a result, an unauthenticated attacker who knows the webhook URL could submit a forged payload and cause the workflow to execute with attacker-controlled data. This vulnerability is fixed in 2.25.7 and 2.26.2.

nvdaltovulnerabilidad CVSS 7.2 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-54304] n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authenticated user with permission to create or modify workflows and access to a SecurityScorecard credential with limited allowed domains could configure the SecurityScorecard node's report download operation to target an attacker-controlled URL. The node attached the SecurityScorecard API token to the o…

nvdaltovulnerabilidad CVSS 7.7 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-54305] n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE …

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without performing per-resource ownership or scope checks on the target workflow or credential. An authenticated user with no project membership or credential sharing relationship could enumerate credential iden…

nvdcriticovulnerabilidad CVSS 9.9 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-49465] n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows could supply a local filesystem path as the source repository in the Git node's Clone operation, or as the target repository in the Push operation, bypassing the N8N_RESTRICT_FILE_ACCESS_TO file sandbox. This allowed the contents of any loca…

nvdaltovulnerabilidad CVSS 7.7 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-49444] n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in 1.123.48, 2.21.8, and 2.22.4.

nvdaltovulnerabilidad CVSS 8.5 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-45732] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credential reconnect endpoints authorized access using credential:read rather than credential:update. An authenticated user with read-only access to a shared credential could initiate an OAuth reconnect flow and overwrite the stored token material for that credential with tokens bound t…

nvdaltovulnerabilidad CVSS 8.1 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-44789] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via an unvalidated pagination parameter in the HTTP Request node. Combined with other techniques this could lead to RCE on the instance. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

nvdcriticovulnerabilidad CVSS 9.9 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-44790] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could inject CLI flags on the Git node's Push operation allowing an attacker to read arbitrary files from the n8n server potentially leading to full compromise. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

nvdaltovulnerabilidad CVSS 8.8 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-44791] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authen…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this could lead to RCE on the n8n host. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

nvdcriticovulnerabilidad CVSS 9.9 NVD

N Crítico vulnerabilidad

23/06/2026

[CVE-2026-44792] n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attack…

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator performed a Source Control Pull, n8n imported the file and could lead to SQL injection on the internal Pos…

nvdcriticovulnerabilidad CVSS 9.0 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-54311] n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated use…

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could pollute the sandbox used by the Merge node's SQL Query mode. Because the sandbox context was cached and reused across all workflow executions on the instance, prototype mutations introduced by one user's workflow persist into subsequent Merge SQL…

nvdaltovulnerabilidad CVSS 7.7 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-54312] n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with perm…

n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via the Microsoft SQL node by supplying a crafted value as the table parameter. This pollutes Object.prototype process-wide for the lifetime of the n8n server process, causing application-wide validation failures and rende…

nvdaltovulnerabilidad CVSS 8.5 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-54313] n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with work…

n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace operation. The value was not validated before being passed to MongoDB as a query filter, allowing unintended documents to be matched and overwritten with attacker-controlled content. This vulnerability is f…

nvdaltovulnerabilidad CVSS 7.7 NVD

N Alto vulnerabilidad

23/06/2026

[CVE-2026-54314] n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompre…

n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompressed output size. An unauthenticated attacker could send a small compressed archive to a public webhook workflow using this node, causing the n8n process to terminate due to memory exhaustion and disru…

nvdaltovulnerabilidad CVSS 7.5 NVD