CRITICAL🇵🇱 Wersja polska

CVE-2026-44791

CVSS 9.4v4.0pub. 2026-06-23upd. 2026-06-24

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this could lead to RCE on the n8n host. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

🇵🇱 Read Polish description →

🤖 AI Analysis

How it works

The vulnerability is classified as CWE-1321 (Prototype Pollution), meaning an attacker can manipulate properties of JavaScript object prototypes through malicious input processed by the XML node. A user with permissions to create or modify workflows can construct a malicious workflow that effectively bypasses the security measures introduced in the previous patch. Combining the XML node with other nodes allows the attack to escalate to arbitrary code execution on the server.

Impact

An attacker can gain full control over the n8n host through remote code execution (RCE), threatening the confidentiality, integrity, and availability of both the local system and connected system resources.

Mitigation & patch

n8n should be updated as soon as possible to version 1.123.43, 2.22.1, or 2.20.7, in which the vulnerability has been fixed. Details are available in the vendor references: https://github.com/n8n-io/n8n/security/advisories/GHSA-wrwr-h859-xh2r

Who is affected

n8n in versions prior to 1.123.43, 2.22.1, and 2.20.7

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X