漏洞公告

n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction

n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check

n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows

n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

n8n: External Secrets Accessible via Workflow Expressions Outside Credentials

n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

n8n: External Secrets Permission Bypass via Expression Parser Mismatch

n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory

n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service

n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service

n8n: Edit Image Node Format Injection Allows Arbitrary File Write

n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON

n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`

n8n: Expression sandbox escape via arrow-function bodies enabling command execution

n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion

n8n: Authenticated code execution in the n8n Git node

n8n: SSRF Protection Bypass via MCP Client Node

n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes

n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login

n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner

n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution