CVE security advisories and vulnerability history for n8n by n8n-io.
Last updated
n8n-io n8n has 64 published CVE records since 2023, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.
This page aggregates every publicly disclosed vulnerability (CVE) affecting n8n-io n8n, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of n8n-io n8n's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of n8n-io n8n's CVEs is confirmed exploited in the wild.
Public exploits
7
7 of n8n-io n8n's CVEs have a known public exploit available.
Browse every n8n-io n8n version named in a CVE, then pick one to see only the CVEs that affect it.
64 CVEs
Showing 30 of 64
The CWE weakness categories most often found in n8n-io n8n CVEs. Follow any weakness for its full explanation.
How many n8n-io n8n CVEs were published each year.
Browse vulnerabilities for other products by n8n-io.
Common questions about n8n-io n8n vulnerabilities.
n8n-io n8n has 64 published CVE records since 2023.
Yes — 1 of n8n-io n8n's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 7 of n8n-io n8n's CVEs have a known public exploit.
1,989 distinct n8n-io n8n versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
n8n-io n8n's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-20 (Improper Input Validation).
n8n-io n8n has 21 critical and 23 high-severity CVEs.
The average CVSS base score across n8n-io n8n's scored CVEs is 7.8.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new n8n-io n8n vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
