CVE catalog

CVE-2026-59206

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with the default workflow:create permission could pollute Object.prototype through a c

[CVE catalog]

Severity
High · CVSS 7.1CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published
Source
[NVD] · [CVE record]
EPSS
0.66% · Oct 25, 2026

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with the default workflow:create permission could pollute Object.prototype through a crafted workflow saved, updated, or imported via the workflow API, allowing unauthenticated requests to be treated as a privileged user and exposing user and project listing endpoints. This issue is fixed in versions 1.123.61, 2.27.4, and 2.28.1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpen8nNot reported1.123.61fixed
Cpen8nNot reported2.27.4fixed
Cpen8nNot reportedNot reportedunknown
Npmn8nNot reported1.123.61fixed
Npmn8nNot reported2.28.1fixed
Npmn8nNot reported2.27.4fixed
Cpen8nNot reportedNot reportedunknown

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpen8ncpeNot reported1.123.61Not reportedNot reportedNot reported
Cpen8ncpeNot reported2.27.4Not reportedNot reportedNot reported
Npmn8nnpmNot reported1.123.61Not reportedNot reportedNot reported
Npmn8nnpmNot reported2.28.1Not reportedNot reportedNot reported
Npmn8nnpmNot reported2.27.4Not reportedNot reportedNot reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CERT-Bund public advisories] · [FIRST EPSS] · [GitHub Advisory Database] · [National Vulnerability Database (NVD)]