CVE 9.4 CRITICAL

n8n: XML Node Prototype Pollution Patch Bypass_CVE-2026-44791

June 23, 2026 invoker category_cve

9.4 / 10

CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Description

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this could lead to RCE on the n8n host. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

AI Analysis

Authenticated users with workflow modification permissions can bypass a patch for CVE-2026-42232 in the XML node, potentially leading to RCE on the n8n host.

Basic Information

ID CVE-2026-44791

Source GitHub_M

Published Jun 23, 2026 at 15:54

Modified Jun 23, 2026 at 17:13

Affected Product

Vendor n8n-io

Product n8n

Version < 1.123.43

Affected Versions n8n-io n8n < 1.123.43
n8n-io n8n >= 2.0.0-rc.0, < 2.20.7
n8n-io n8n >= 2.21.0, < 2.21.1

CWE Classification

CWE-1321

AI Assessment

AI Score 9.4 / 10

AI Severity Critical

Vendor n8n-io

Product n8n

Version < 1.123.43, < 2.20.7, < 2.21.1

References

github.com /n8n-io/n8n/security/advisories/GHSA-wrwr-h859-xh2r

{
    "lastseen": "",
    "description": "n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this could lead to RCE on the n8n host. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.",
    "published": "2026-06-23T15:54:17.298Z",
    "modified": "2026-06-23T17:13:43.642Z",
    "type": "cve",
    "title": "n8n: XML Node Prototype Pollution Patch Bypass",
    "source": "GitHub_M",
    "references": "https://github.com/n8n-io/n8n/security/advisories/GHSA-wrwr-h859-xh2r",
    "id": "CVE-2026-44791",
    "bulletinFamily": "",
    "cwe": [
        "CWE-1321"
    ],
    "cvelist": null,
    "sourceData": "n8n-io n8n < 1.123.43\nn8n-io n8n >= 2.0.0-rc.0, < 2.20.7\nn8n-io n8n >= 2.21.0, < 2.21.1",
    "sourceHref": "",
    "cvss": {
        "score": 9.4,
        "severity": "CRITICAL",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "n8n",
    "version": "< 1.123.43",
    "vendor": "n8n-io",
    "ai_description": "Authenticated users with workflow modification permissions can bypass a patch for CVE-2026-42232 in the XML node, potentially leading to RCE on the n8n host.",
    "ai_severity": "Critical",
    "ai_vendor": "n8n-io",
    "ai_product": "n8n",
    "ai_version": "< 1.123.43, < 2.20.7, < 2.21.1",
    "ai_score": 9.4
}

💭 Join the Security Discussion ❌ Cancel Reply