CVE-2026-56349

n8n has fixed multiple vulnerabilities in the n8n workflow automation platform, specifically in versions 2.10.1, 2.9.3, 1.123.22, and other related releases. The vulnerabilities affect various components within n8n, including the Form nodes, Python Code node, JavaScript Task Runner sandbox, Merge node, Read/Write Files from Disk node, workflow expression evaluation, core workflow editing functionality, GitHub Webhook Trigger node, ZendeskTrigger node, Guardrail node, and Chat Trigger node. - Unauthenticated and authenticated users can, under certain conditions, inject and execute arbitrary code, sometimes via sandbox escapes, leading to remote code execution on the host system. - Vulnerabilities in nodes such as Merge node and Read/Write Files from Disk node allow authenticated users with workflow editing rights to write files and execute shell commands. - Webhook nodes (GitHub and ZendeskTrigger) lack HMAC-SHA256 signature verification, allowing unauthorized POST requests to be sent that trigger workflows. - Authentication bypass vulnerabilities in SSO and Chat Trigger nodes enable the circumvention of security mechanisms and unauthorized access. - Input validation in the Guardrail node can be bypassed, potentially compromising the integrity of workflows. These vulnerabilities are present in multiple versions and releases of n8n and are related to workflow creation, modification, and execution, where exploitation can lead to taking over the host system, manipulating workflows, and bypassing authentication controls.

[![CVE-2026-56349 status](https://www.csirts.com/badge/CVE-2026-56349)](https://www.csirts.com/cve/CVE-2026-56349)