VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: n8n× v celém archivu zrušit filtry

16 karet z 16 položek CZ · EN/orig

· zachyceno

Vulnerability in n8n

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.7, CVEs: CVE-2026-119408, Summary: CVE-2026-119408 (CVSS: 8.7): The Function and Function Item nodes run user code in the vm2 sandbox, and the LangChain Code node runs user code in the n8n main process. An authenticated user with permission to create or modify workflows could use these nodes to execute arbitrary code in the n8n main process, outside the task runner isolation that applies to the Code node.

EPSS 0.01 CVSS 8.7 CVE-2026-119408 n8n FI

tg: zranitelnost

· zachyceno · NCSC-FI · Vulnerability in n8n

n8n security advisory (AV26-1103)

Serial number: AV26-1103 Date: October 29, 2026 As of October 28, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 2.44.1 Prior to 2.43.5 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Crafted Workflow ID Gives Access to Data Tables in Other Projects Overview - n8n-io/n8n

n8n CA

tg: zranitelnost

· Cyber Centre Kanada · n8n security advisory (AV26-1103)

n8n security advisory (AV26-1044)

Serial number: AV26-1044 Date: October 15, 2026 As of October 14, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.83 Prior to 2.41.4 Prior to 2.42.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field Advisory Shared-Workflow Credential Check Misses Nested and Tool Inline Sub…

n8n CA

tg: zranitelnost

· Cyber Centre Kanada · n8n security advisory (AV26-1044)

· zachyceno

Vulnerabilities in n8n

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.5, CVEs: CVE-2026-103245, CVE-2026-103246, CVE-2026-103247, CVE-2026-103248, CVE-2026-103249, CVE-2026-103250, CVE-2026-103251, CVE-2026-103252, CVE-2026-103253, CVE-2026-103254, CVE-2026-103255, CVE-2026-103256, CVE-2026-103257, CVE-2026-103258, CVE-2026-103259, CVE-2026-103260, Summary: CVE-2026-103245 (CVSS: 6.9): n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1…

EPSS 0.00 CVSS 8.5 CVE-2026-103245 CVE-2026-103246 CVE-2026-103247 CVE-2026-103248 CVE-2026-103249 CVE-2026-103250 CVE-2026-103251 CVE-2026-103252 CVE-2026-103253 CVE-2026-103254 CVE-2026-103255 CVE-2026-103256 CVE-2026-103257 CVE-2026-103258 CVE-2026-103259 CVE-2026-103260 n8n FI

tg: zranitelnost tp: identita

· zachyceno · NCSC-FI · Vulnerabilities in n8n

n8n security advisory (AV26-985)

Serial number: AV26-985 Date: October 1, 2026 As of October 1, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.80 Prior to 2.39.6 Prior to 2.40.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Community Package Install Validation Bypass via PubSub in Queue Mode Deployments Dynamic Credentials Authorize Endpoint Leaks Session Token to Attacker-Controlled Resolver…

n8n CA

tg: zranitelnost tp: identita

· Cyber Centre Kanada · n8n security advisory (AV26-985)

Rilevate vulnerabilità in n8n

Il team di sviluppo n8n-io ha rilevato nuove vulnerabilità, di cui 11 con gravità "alta", che interessano la piattaforma open-source per l'automazione dei workflow n8n. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un attaccante di ottenere informazioni riservate, eludere misure di sicurezza e meccanismi di autenticazione o eseguire codice arbitrario sui sistemi interessati.

EPSS 0.00 CVE-2026-103246 CVE-2026-103248 CVE-2026-103250 CVE-2026-103251 CVE-2026-103252 CVE-2026-103253 CVE-2026-103254 CVE-2026-103255 CVE-2026-103256 CVE-2026-103257 CVE-2026-103259 n8n IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Rilevate vulnerabilità in n8n

n8n security advisory (AV26-916)

Serial Number: AV26-916Date: September 11, 2026 As of September 8, 2026, n8n is affected by a vulnerability in the following product: n8n Prior to 2.37.7 Prior to 2.38.2 Prior to 1.123.76 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Release n8n@1.123.76 Release n8n@2.37.7 Release n8n@2.38.2 Overview - n8n-io/n8n - GitHub

n8n CA

tg: zranitelnost

· Cyber Centre Kanada · n8n security advisory (AV26-916)

n8n security advisory (AV26-880)

Serial Number: AV26-880Date: September 3, 2026 As of September 3, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.76 Prior to 2.35.4 Prior to 2.36.2 Prior to 2.37.7 Prior to 2.38.2 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Overview · n8n-io/n8n · GitHub

n8n CA

tg: zranitelnost

· Cyber Centre Kanada · n8n security advisory (AV26-880)

n8n security advisory (AV26-836)

Serial Number: AV26-836Date: August 20, 2026 As of August 20, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.69 Prior to 2.33.4 Prior to 2.34.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. RCE in the n8n Main Process via Path Traversal in MCP Node-Schema Loading Snowflake Node Arbitrary File Read and Write via Client-Side Commands n8n Security

n8n CA

· Cyber Centre Kanada · n8n security advisory (AV26-836)