n8n.io

Security Scorecard

Score

100B

Total CVEs

7

Patch Rate

71%

5 patched

Avg Response

-

days to patch

Critical Gaps

0

exploitable, no detection

Severity Breakdown

Critical3
High3
Medium1
Low0

Patch Status

Patched5 (71%)
Partial/Workaround2 (29%)
Unpatched0 (0%)

CVEs (8)

CVE IDTitleSeverityScoreDaysPatch
CVE-2026-1470n8n Workflow Expression RCECritical9.9-Patched
CVE-2026-0863N8n Python Runner Sandbox EscapeHigh8.5-Patched
CVE-2025-68949N8n Workflow Automation Platform Remote IP Whitelist BypassMedium5.3-Patched
CVE-2026-21858N8n Workflow Automation VulnerabilityCritical10.0-Patched
CVE-2026-21877CVE-2026-21877Critical9.9-Patched
CVE-2025-61914n8n Workflow Automation Platform XSS VulnerabilityHigh7.3-Workaround
CVE-2025-65964n8n Workflow Automation Platform VulnerabilityHigh8.8-Partial
CVE-2025-68697n8n Workflow Automation Platform VulnerabilityN/A--Workaround