LiteLLM: Local file read via request-supplied OIDC file references

CVE-2026-59819

### Impact LiteLLM's `/health/test_connection` endpoint resolved request-supplied environment and OIDC file references

历史摘要 · 未重新核验 · GitHub Advisory

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

CVE-2026-59820

### Impact LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives.

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

CVE-2026-65014

## Impact The `DELETE /${restEndpoint}/test-webhook/:id` route is registered before the authentication middleware is app

历史摘要 · 未重新核验 · GitHub Advisory

n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction

CVE-2026-65596

## Impact The GraphQL node did not enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials (suc

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check

CVE-2026-65594

## Impact The OAuth 2.1 consent and token-issuance flow introduced in n8n 2.27.0 does not verify that the authenticated

历史摘要 · 未重新核验 · GitHub Advisory

n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows

CVE-2026-65590

## Impact The shell tool in the `@n8n/computer-use` package applied its sandbox restrictions only on macOS. On Linux and

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

CVE-2026-58661

## Impact An authenticated user can repeatedly upload files to the data-table upload endpoint, bypassing the per-request

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

CVE-2026-59253

## Impact An authenticated user with permission to create workflows in one project could bypass project/folder authoriza

历史摘要 · 未重新核验 · GitHub Advisory

n8n: External Secrets Accessible via Workflow Expressions Outside Credentials

CVE-2026-59254

## Impact External secrets were incorrectly resolved in workflow node expressions, where they are not intended to be ava

历史摘要 · 未重新核验 · GitHub Advisory

n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

CVE-2026-59257

## Impact The legacy MySQL v1 node's `executeQuery` operation substitutes evaluated `{{ ... }}` expression values direct

历史摘要 · 未重新核验 · GitHub Advisory

n8n: External Secrets Permission Bypass via Expression Parser Mismatch

CVE-2026-59259

## Impact Due to a mismatch between the static validation check and the runtime expression engine, an authenticated user

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory

## Impact The component `@n8n/computer-use` file-search tool confined searches to a configured base directory. A crafte

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service

## Impact An authenticated user able to create or edit a workflow expression could abuse the expression engine's array-

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service

## Impact The Edit Fields (Set) node assigned output fields through a dot-notation path setter without restricting the

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Edit Image Node Format Injection Allows Arbitrary File Write

## Impact The n8n Edit Image node passed its output format to the underlying image library without validation, so a cra

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON

## Impact n8n's credential-access checks validated only a node's top-level credentials, not credentials referenced insi

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`

## Impact An authenticated member with edit access to a shared workflow could reference another user's credential in an

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Expression sandbox escape via arrow-function bodies enabling command execution

## Impact An authenticated user with permission to create or modify workflows could abuse crafted expressions using arr

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion

## Impact The n8n Send Email node did not enforce that its message fields were strings, so a crafted untrusted non-stri

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Authenticated code execution in the n8n Git node

## Impact Authenticated n8n users with rights to create and execute workflows could achieve code execution on the n8n h

历史摘要 · 未重新核验 · GitHub Advisory