VENDOR

n8n-io vulnerabilities: CVEs, exploitation and patches

Every n8n-io CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-77070
N8n MongoDB node NoSQL injection lets attackers disclose or delete data n8n-io n8n · Sep 29, 2026
- PATCH AVAILABLE
CRITICAL 9.8
CVE-2026-65591
N8n sanitizer bypass authenticated remote code execution n8n-io n8n · Sep 29, 2026
- PoC PUBLIC
- PATCH AVAILABLE
HIGH 8.8