n8n-io n8n güvenlik açıkları
n8n-io
- Toplam açık
- 16
- Kritik
- 1
- Aktif istismar
- 1
- Yaması çıkan
- 15
- Son açık
- 1 sa önce
Önem dağılımı
- Kritik 1
- Yüksek 12
- Orta 3
- Düşük 0
Son açıklar
16 açık
- 7,5Yüksek CVE-2026-118679Yama var n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger
- 7,1Yüksek CVE-2026-118678Yama var n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction
- 5,9Orta CVE-2026-118677Yama var n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
- 7,1Yüksek CVE-2026-118676Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass
- 7,1Yüksek CVE-2026-118675Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow
- 8,3Yüksek CVE-2026-118649Yama var n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables
- 7,3Yüksek CVE-2026-118648Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy
- 8,2Yüksek CVE-2026-118647Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data
- 6,5Orta CVE-2026-118646Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node
- 8,7Yüksek CVE-2026-118645Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter
- 7,7Yüksek CVE-2026-118644Yama var n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance
- 8,2Yüksek CVE-2026-118643Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data
- 7,1Yüksek CVE-2026-118642Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows
- 7,5Yüksek CVE-2026-118641Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes
- 5,4Orta CVE-2026-118640Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass
- 10,0Kritik CVE-2025-68613Aktif istismar n8n iş akışı ifade değerlendirmesinde uzaktan kod çalıştırma açığı