n8n kayıtları
n8n üreticisine ait 179 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %0,6
- Silahlaştırılmış
- 1 · %0,6
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- 82 gün
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')19
- CWE-94 Improper Control of Generation of Code ('Code Injection')14
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')13
- CWE-639 Authorization Bypass Through User-Controlled Key13
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')12
- CWE-863 Incorrect Authorization12
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
179 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
95Hemen | CVE-2025-68613Silahlaştırılmış | n8n Vulnerable to Remote Code Execution via Expression Injectionn8n · n8n · CWE-913 | Yüksek8,8 | KEV | %99,0 | 19 Ara 2025 |
63Bu hafta | CVE-2026-21858Kavram kanıtı | n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handlingn8n · n8n · CWE-20 | Kritik10,0 | — | %78,2 | 7 Oca 2026 |
45Planlayın | CVE-2026-1470İstismar yok | Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.n8n · n8n · CWE-95 | Kritik9,9 | — | %20,7 | 27 Oca 2026 |
43Planlayın | CVE-2025-68668İstismar yok | n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Noden8n · n8n · CWE-693 | Kritik9,9 | — | %13,2 | 26 Ara 2025 |
42Planlayın | CVE-2026-0863İstismar yok | Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.n8n · n8n · CWE-95 | Kritik9,9 | — | %9,4 | 18 Oca 2026 |
41Planlayın | CVE-2026-21877Kavram kanıtı | n8n is vulnerable to Remote Code Execution via Arbitrary File Writen8n · n8n · CWE-94 | Kritik9,9 | — | %5,4 | 7 Oca 2026 |
38İzleyin | CVE-2026-27493İstismar yok | n8n has Unauthenticated Expression Evaluation via Form Noden8n · n8n · CWE-94 | Kritik9,5 | — | %1,6 | 25 Şub 2026 |
37İzleyin | CVE-2026-25049Kavram kanıtı | n8n Has an Expression Escape Vulnerability Leading to RCEn8n · n8n · CWE-913 | Kritik9,4 | — | %1,6 | 4 Şub 2026 |
37İzleyin | CVE-2026-21893İstismar yok | n8n Vulnerable to Command Injection in Community Package Installationn8n · n8n · CWE-20 | Kritik9,4 | — | %1,6 | 4 Şub 2026 |
37İzleyin | CVE-2026-27497İstismar yok | n8n has Potential Remote Code Execution via Merge Noden8n · n8n · CWE-89 | Kritik9,4 | — | %1,1 | 25 Şub 2026 |
37İzleyin | CVE-2026-27577Kavram kanıtı | n8n: Expression Sandbox Escape Leads to RCEn8n · n8n · CWE-94 | Kritik9,4 | — | %1,0 | 25 Şub 2026 |
37İzleyin | CVE-2026-33660İstismar yok | n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Moden8n · n8n · CWE-94 | Kritik9,4 | — | %0,9 | 25 Mar 2026 |
37İzleyin | CVE-2026-27495Kavram kanıtı | n8n has a Sandbox Escape in its JavaScript Task Runnern8n · n8n · CWE-94 | Kritik9,4 | — | %0,8 | 25 Şub 2026 |
37İzleyin | CVE-2026-33696İstismar yok | n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCEn8n · n8n · CWE-1321 | Kritik9,4 | — | %0,8 | 25 Mar 2026 |
37İzleyin | CVE-2026-42231Kavram kanıtı | n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCEn8n · n8n · CWE-1321 | Kritik9,4 | — | %0,8 | 4 May 2026 |
37İzleyin | CVE-2026-25056İstismar yok | n8n Arbitrary File Write leading to RCE in n8n Merge Noden8n · n8n · CWE-434 | Kritik9,4 | — | %0,7 | 4 Şub 2026 |
37İzleyin | CVE-2025-65964Kavram kanıtı | n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hookn8n · n8n · CWE-829 | Kritik9,4 | — | %0,7 | 8 Ara 2025 |
37İzleyin | CVE-2026-25053Kavram kanıtı | n8n is Vulnerable to OS Command Injection in Git Noden8n · n8n · CWE-78 | Kritik9,4 | — | %0,6 | 4 Şub 2026 |
37İzleyin | CVE-2026-25115İstismar yok | n8n is vulnerable to Python sandbox escapen8n · n8n · CWE-693 | Kritik9,4 | — | %0,6 | 4 Şub 2026 |
37İzleyin | CVE-2026-44791İstismar yok | n8n: XML Node Prototype Pollution Patch Bypassn8n · n8n · CWE-1321 | Kritik9,4 | — | %0,5 | 23 Haz 2026 |
37İzleyin | CVE-2026-44790İstismar yok | n8n: Arbitrary File Read via Git Noden8n · n8n · CWE-88 | Kritik9,4 | — | %0,5 | 23 Haz 2026 |
37İzleyin | CVE-2026-44789Kavram kanıtı | n8n: HTTP Request Node Pagination Prototype Pollution to RCEn8n · n8n · CWE-1321 | Kritik9,4 | — | %0,5 | 23 Haz 2026 |
37İzleyin | CVE-2026-42232İstismar yok | n8n: XML Node Prototype Pollution to RCEn8n · n8n · CWE-1321 | Kritik9,4 | — | %0,5 | 4 May 2026 |
37İzleyin | CVE-2026-25052İstismar yok | n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Usersn8n · n8n · CWE-367 | Kritik9,4 | — | %0,3 | 4 Şub 2026 |
36İzleyin | CVE-2026-27498İstismar yok | n8n has Arbitrary Command Execution via File Write and Git Operationsn8n · n8n · CWE-94 | Kritik9,0 | — | %1,3 | 25 Şub 2026 |
- CVE-2025-6861395Hemen
n8n Vulnerable to Remote Code Execution via Expression Injection
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99n8n · n8n19 Ara 2025
- CVE-2026-2185863Bu hafta
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
KritikCVSS 10,0Kavram kanıtıEPSS %78n8n · n8n7 Oca 2026
- CVE-2026-147045Planlayın
Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.
KritikCVSS 9,9İstismar yokEPSS %21n8n · n8n27 Oca 2026
- CVE-2025-6866843Planlayın
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
KritikCVSS 9,9İstismar yokEPSS %13n8n · n8n26 Ara 2025
- CVE-2026-086342Planlayın
Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.
KritikCVSS 9,9İstismar yokEPSS %9n8n · n8n18 Oca 2026
- CVE-2026-2187741Planlayın
n8n is vulnerable to Remote Code Execution via Arbitrary File Write
KritikCVSS 9,9Kavram kanıtıEPSS %5n8n · n8n7 Oca 2026
- CVE-2026-2749338İzleyin
n8n has Unauthenticated Expression Evaluation via Form Node
KritikCVSS 9,5İstismar yokEPSS %2n8n · n8n25 Şub 2026
- CVE-2026-2504937İzleyin
n8n Has an Expression Escape Vulnerability Leading to RCE
KritikCVSS 9,4Kavram kanıtıEPSS %2n8n · n8n4 Şub 2026
- CVE-2026-2189337İzleyin
n8n Vulnerable to Command Injection in Community Package Installation
KritikCVSS 9,4İstismar yokEPSS %2n8n · n8n4 Şub 2026
- CVE-2026-2749737İzleyin
n8n has Potential Remote Code Execution via Merge Node
KritikCVSS 9,4İstismar yokEPSS %1n8n · n8n25 Şub 2026
- CVE-2026-2757737İzleyin
n8n: Expression Sandbox Escape Leads to RCE
KritikCVSS 9,4Kavram kanıtıEPSS %1n8n · n8n25 Şub 2026
- CVE-2026-3366037İzleyin
n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
KritikCVSS 9,4İstismar yokEPSS %1n8n · n8n25 Mar 2026
- CVE-2026-2749537İzleyin
n8n has a Sandbox Escape in its JavaScript Task Runner
KritikCVSS 9,4Kavram kanıtıEPSS %1n8n · n8n25 Şub 2026
- CVE-2026-3369637İzleyin
n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE
KritikCVSS 9,4İstismar yokEPSS %1n8n · n8n25 Mar 2026
- CVE-2026-4223137İzleyin
n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE
KritikCVSS 9,4Kavram kanıtıEPSS %1n8n · n8n4 May 2026
- CVE-2026-2505637İzleyin
n8n Arbitrary File Write leading to RCE in n8n Merge Node
KritikCVSS 9,4İstismar yokEPSS %1n8n · n8n4 Şub 2026
- CVE-2025-6596437İzleyin
n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook
KritikCVSS 9,4Kavram kanıtıEPSS %1n8n · n8n8 Ara 2025
- CVE-2026-2505337İzleyin
n8n is Vulnerable to OS Command Injection in Git Node
KritikCVSS 9,4Kavram kanıtıEPSS %1n8n · n8n4 Şub 2026
- CVE-2026-2511537İzleyin
n8n is vulnerable to Python sandbox escape
KritikCVSS 9,4İstismar yokEPSS %1n8n · n8n4 Şub 2026
- CVE-2026-4479137İzleyin
n8n: XML Node Prototype Pollution Patch Bypass
KritikCVSS 9,4İstismar yokEPSS %1n8n · n8n23 Haz 2026
- CVE-2026-4479037İzleyin
n8n: Arbitrary File Read via Git Node
KritikCVSS 9,4İstismar yokEPSS %1n8n · n8n23 Haz 2026
- CVE-2026-4478937İzleyin
n8n: HTTP Request Node Pagination Prototype Pollution to RCE
KritikCVSS 9,4Kavram kanıtıEPSS %1n8n · n8n23 Haz 2026
- CVE-2026-4223237İzleyin
n8n: XML Node Prototype Pollution to RCE
KritikCVSS 9,4İstismar yokEPSS %1n8n · n8n4 May 2026
- CVE-2026-2505237İzleyin
n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users
KritikCVSS 9,4İstismar yokEPSS %0n8n · n8n4 Şub 2026
- CVE-2026-2749836İzleyin
n8n has Arbitrary Command Execution via File Write and Git Operations
KritikCVSS 9,0İstismar yokEPSS %1n8n · n8n25 Şub 2026