{"id":"EUVD-2026-44624","enisaUuid":"038bc492-2d8f-3b25-8d21-179552967e08","description":"n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malicious inputs to circumvent guardrail protections and compromise workflow integrity.","datePublished":"Jul 15, 2026, 11:25:27 AM","dateUpdated":"Jul 15, 2026, 12:42:58 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-fvfv-ppw4-7h2w\nhttps://www.vulncheck.com/advisories/n8n-guardrail-node-bypass-via-crafted-input\n","aliases":"CVE-2026-56349\nGHSA-9v3h-fx77-8r29\n","assigner":"VulnCheck","epss":0.47,"enisaIdProduct":[{"id":"634acb93-548a-381e-8b71-3ca3b3e5a9d7","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c2.10.0"}],"enisaIdVendor":[{"id":"4e0a7d5c-1bf7-3d49-b5c3-ad114b4e6824","vendor":{"name":"n8n"}}],"enisaIdVulnerability":[{"id":"31b2b202-0ea9-363a-9f1b-1f22e1a1b439","vulnerability":{"id":"GHSA-9v3h-fx77-8r29","description":"n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malicious inputs to circumvent guardrail protections and compromise workflow integrity.","datePublished":"Jul 15, 2026, 12:32:02 PM","dateUpdated":"Jul 15, 2026, 12:32:02 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-fvfv-ppw4-7h2w\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-56349\nhttps://www.vulncheck.com/advisories/n8n-guardrail-node-bypass-via-crafted-input\n","enisa_id":"EUVD-2026-44624\n","aliases":"GHSA-9v3h-fx77-8r29\nCVE-2026-56349\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"4267770d-103e-39cc-a9ae-b97878a1631a","vulnerability":{"id":"CVE-2026-56349","description":"n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malicious inputs to circumvent guardrail protections and compromise workflow integrity.","datePublished":"Jul 15, 2026, 11:25:27 AM","dateUpdated":"Jul 15, 2026, 12:42:58 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-fvfv-ppw4-7h2w\nhttps://www.vulncheck.com/advisories/n8n-guardrail-node-bypass-via-crafted-input\n","enisa_id":"EUVD-2026-44624\n","assigner":"VulnCheck","epss":0.47,"dataProcessed":"Nov 1, 2026, 7:17:53 AM","vulnerabilityProduct":[{"id":"5c65df28-1919-3aec-8e31-283b98ce73c7","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"0 \u003c2.10.0"}],"vulnerabilityVendor":[{"id":"05af9dd5-7f4e-3a24-a9b2-21d5ec9ce510","vendor":{"name":"n8n"}}]}}],"enisaIdAdvisory":[{"id":"dc860ed5-cf91-30b7-9a22-fc7b21339b1d","advisory":{"id":"NCSC-2026-0248","description":"Kwetsbaarheden verholpen in n8n workflow automation platform","datePublished":"Jul 17, 2026, 2:31:46 PM","dateUpdated":"Jul 17, 2026, 2:31:46 PM","baseScore":0.0,"references":"","aliases":"CVE-2026-27493\nCVE-2026-27494\nCVE-2026-27495\nCVE-2026-27497\nCVE-2026-27498\nCVE-2026-27577\nCVE-2026-27578\nCVE-2026-56357\nCVE-2026-56350\nCVE-2026-56360\nCVE-2026-56349\nCVE-2026-56353\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"364a8433-3afa-3542-89ea-53fe6c29c226","product":{"name":"n8n","vendor":{"name":"n8n-io"}}}]}}]}