n8n vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-68613Criticaln8n: n8n Vulnerable to Remote Code Execution via Expression Injection CVE-2025-65964Criticaln8n: n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook CVE-2025-62726Highn8n: n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook GHSA-365G-VJW2-GRX8Highn8n-nodes-base: n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host CVE-2025-58177Mediumn8n: Stored XSS in n8n LangChain Chat Trigger Node via initialMessages Parameter CVE-2025-57749Mediumn8n: n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted files CVE-2025-52478Highn8n: Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source CVE-2025-52554Mediumn8n: n8n is vulnerable to Improper Authorization through its `/stop` endpoint CVE-2025-49595Mediumn8n: n8n Vulnerable to Denial of Service via Malformed Binary Data Requests CVE-2025-49592Mediumn8n: n8n allows open redirects via the /signin endpoint CVE-2025-46343Mediumn8n: n8n Vulnerable to Stored XSS through Attachments View Endpoint CVE-2023-27562Mediumn8n: n8n Directory Traversal vulnerability CVE-2023-27564Highn8n: n8n Information Disclosure vulnerability CVE-2023-27563Highn8n: n8n Privilege Escalation vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo