{"id":"EUVD-2026-38485","enisaUuid":"68f509a1-293c-33f0-9ea5-15f195018e0d","description":"n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this could lead to RCE on the n8n host. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.","datePublished":"Jun 23, 2026, 3:54:17 PM","dateUpdated":"Jun 23, 2026, 5:13:43 PM","baseScore":9.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-wrwr-h859-xh2r\n","aliases":"CVE-2026-44791\nGHSA-wrwr-h859-xh2r\n","assigner":"GitHub_M","epss":0.54,"enisaIdProduct":[{"id":"5fc9c946-7341-35ee-869e-cfe4e5add36f","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"\u003c 1.123.43"},{"id":"926de9c9-05ad-36fb-ad0c-06e11b7a7d32","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.21.0, \u003c 2.21.1"},{"id":"9943470d-678f-39fc-861d-9c43df7060c5","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0, \u003c 2.20.7"}],"enisaIdVendor":[{"id":"62175f3b-49d0-3092-b2e7-d76c04f8f120","vendor":{"name":"n8n-io"}}],"enisaIdVulnerability":[{"id":"095942c2-55d6-3029-b0c9-41e7335f9f87","vulnerability":{"id":"CVE-2026-44791","description":"n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this could lead to RCE on the n8n host. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.","datePublished":"Jun 23, 2026, 3:54:17 PM","dateUpdated":"Jun 23, 2026, 5:13:43 PM","status":"PUBLISHED","baseScore":9.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-wrwr-h859-xh2r\n","enisa_id":"EUVD-2026-38485\n","assigner":"GitHub_M","epss":0.54,"dataProcessed":"Nov 3, 2026, 7:17:56 AM","vulnerabilityProduct":[{"id":"4efaecbd-17a9-3249-bbeb-b61cebe0d5cb","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"\u003c 1.123.43"},{"id":"7b1710fe-9900-3cef-9ecf-1196acbab9f1","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0, \u003c 2.20.7"},{"id":"a08987a7-5e85-3ef9-b4c2-2a7f2b1e8f28","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.21.0, \u003c 2.21.1"}],"vulnerabilityVendor":[{"id":"f1a3418b-78f4-3a40-b36c-19f604324b1e","vendor":{"name":"n8n-io"}}]}},{"id":"5bdc2bc7-ce2e-37bb-b132-5dc1bc74120f","vulnerability":{"id":"GHSA-wrwr-h859-xh2r","description":"n8n Has an XML Node Prototype Pollution Patch Bypass","datePublished":"May 14, 2026, 4:17:49 PM","dateUpdated":"Jul 20, 2026, 1:40:56 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-wrwr-h859-xh2r\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44791\nhttps://github.com/advisories/GHSA-hqr4-h3xv-9m3r\nhttps://github.com/n8n-io/n8n\n","enisa_id":"EUVD-2026-38485\n","aliases":"CVE-2026-44791\nGHSA-wrwr-h859-xh2r\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"9a3b1517-0c81-34b2-ab52-da350406e3a8","advisory":{"id":"WID-SEC-W-2026-1519","description":"n8n: Mehrere Schwachstellen","summary":"Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.","datePublished":"May 12, 2026, 10:00:00 PM","dateUpdated":"Jun 22, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1519.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-1519\n","aliases":"CVE-2026-44789\nCVE-2026-44790\nCVE-2026-44791\nCVE-2026-44792\nCVE-2026-45732\nCVE-2026-56348\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"876ce0a6-cb42-3ffa-84fb-11f240950a2f","product":{"name":"n8n","vendor":{"name":"n8n-io"}}},{"id":"bc6a8942-a8dc-3147-814d-e2522d79d961","product":{"name":"2.21.1","vendor":{"name":"Barco"}}},{"id":"ca630acb-95a7-32bc-a4dd-069d9fea0b5a","product":{"name":"2.20.7","vendor":{"name":"n8n"}}},{"id":"da0d04df-cc70-3ea5-b822-199d410674cb","product":{"name":"2.20.0","vendor":{"name":"n8n"}}},{"id":"f123590f-7218-34f0-942b-3c5437453fbb","product":{"name":"1.123.43","vendor":{"name":"n8n"}}},{"id":"ffcf765e-b681-37d8-80f9-df47bcbb0ca4","product":{"name":"2.22.1","vendor":{"name":"Dell"}}}]}}]}