CVE Vulnerability Catalog

n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references on workflows in different projects.

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completion page. The completion page applied its sandboxing Content-Security-Policy only when respondWith was not set to 'redirect', but responseText was always rendered as raw HTML. An authenticated member could set respondWith to 'redirect' via an expression while keeping responseText populated, causing the completion page to serve unsanitized HTML and script from the n8n origin. Any visitor who submitted the resulting public form would have that script execute same-origin with their session.

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Many, Delete, and Update operations, which built filter queries by concatenating an expression-bindable value without escaping. An attacker could inject a condition that widened the filter to match every row, turning an intended single-row operation into full-table disclosure, deletion, or modification.

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacker who can influence the resolved query (e.g., via externally-controlled data) can inject operators such as $ne or $where, turning an intended single-document lookup into full-collection disclosure, full-collection deletion, or other operations on the database server.

A vulnerability in n8n before 1.123.69, 2.33.4, and 2.34.1 is an SSRF protection bypass in the OAuth2 credential authorization-code-to-access-token exchange. The token exchange uses a separate HTTP client without SSRF guard, allowing a user with credential-creation permissions to set the access-token URL to an internal address and complete the OAuth2 flow, causing n8n to send a token-exchange POST to that target and reflect the response back to the attacker.

n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader derives a node's schema module path directly from the attacker-supplied node type string without validating path-traversal sequences. An authenticated user with global:member privileges can reference malicious files via path traversal, causing code execution in the n8n main process.

Unauthenticated Broken Access Control in Chaplin <= 2.6.8 versions. This means that a person without authentication can access resources or functions that should be protected.

Unauthenticated Broken Access Control vulnerability in Koji versions up to 2.2.1. An attacker without authentication can gain unauthorized access to protected functions.

Unauthenticated Broken Access Control vulnerability in EPROLO Dropshipping plugin versions up to 2.4.2. An attacker without authentication can access administrative or other protected resources.

Vulnerability allowing arbitrary file upload by users with Subscriber role in the Warehouse Cargo plugin. Affects versions up to 2.6.9.

Vulnerability allowing arbitrary file upload by users with Subscriber role in the Smart Cleaning plugin. Affects versions up to 4.8.6.

Vulnerability allowing arbitrary file upload by users with Subscriber role in the IT Residence plugin. Affects versions up to 3.2.1.

SQL Injection vulnerability in eShipper Commerce plugin versions up to 2.16.13, exploitable by a user with Subscriber role. A low-privileged user can inject SQL queries into the database.

Unauthenticated broken authentication vulnerability in the User Registration & Membership Pro plugin. Affects versions up to 5.4.5.

SQL Injection vulnerability in WP w3all phpBB plugin versions up to 3.0.5, exploitable by a user with Subscriber role. A low-privileged user can inject SQL queries into the database.

Unauthenticated PHP Object Injection vulnerability in the FundEngine plugin. Affects versions up to 1.7.9.

Subscriber Remote Code Execution (RCE) vulnerability in the Query Wrangler plugin. Affects versions up to 1.5.57.

Subscriber Cross Site Scripting (XSS) in WP BASE Booking <= 6.3.2 versions.

Unauthenticated SQL Injection vulnerability in the BookingPress Appointment Booking Pro plugin. Affects versions up to 6.0.2.

Unauthenticated Cross Site Scripting (XSS) vulnerability in NotificationX Pro plugin versions up to 3.1.4. An attacker without authentication can inject a malicious script into the page, which executes in the victim's browser.