n8n: SSRF Protection Bypass via MCP Client Node

## Impact On an n8n instance with SSRF protection enabled, the MCP Client node sent requests to a user-supplied endpoin

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

## Impact Authenticated n8n users with workflow create/execute rights could use the Git node's fetch, pull, or push-tag

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes

## Impact The credential "Allowed HTTP Request Domains" allowlist was intended to restrict which hosts a credential's s

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login

## Impact In an n8n instance, when a validly-signed incoming token was matched to a local account by its email claim, t

历史摘要 · 未重新核验 · GitHub Advisory

n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner

CVE-2026-65016

## Impact n8n's Enterprise SSO instance-role provisioning maps a role claim asserted by the configured Identity Provider

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution

CVE-2026-65591

## Impact The legacy expression evaluator's computed-member sanitizer can be bypassed by an authenticated user with work

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access

CVE-2026-65593

## Impact Endpoints in `/rest/dynamic-node-parameters/` lacked authorization scopes, making it reachable by any authent

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs

CVE-2026-65595

## Impact JWTs issued through the Token Exchange module were assigned all Public API key scopes, regardless of the acti

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution

CVE-2026-59208

## Impact When an n8n instance is configured with more than one trusted token-exchange issuer, external identities are r

历史摘要 · 未重新核验 · GitHub Advisory

n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

CVE-2026-59207

## Impact The AI Agents feature did not enforce the "Allowed HTTP Request Domains" restriction configured on credentials

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

CVE-2026-59206

## Impact An authenticated user with the default `workflow:create` permission could pollute `Object.prototype` through a

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Shared Credential Header Leak via HTTP Request Pagination Expression

CVE-2026-59209

## Impact An authenticated member with use-only editor access to a shared workflow could read credential-populated heade

历史摘要 · 未重新核验 · GitHub Advisory

Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

CVE-2026-59921

# Security Vulnerability Report: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder ## 1. Vulnerabil

历史摘要 · 未重新核验 · GitHub Advisory

Netty: STOMP CONNECT Frame Header Injection in Netty

CVE-2026-59920

# Security Vulnerability Report: STOMP CONNECT Frame Header Injection in Netty ## 1. Vulnerability Summary | Field | V

历史摘要 · 未重新核验 · GitHub Advisory

Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address

CVE-2026-59919

# Security Vulnerability Report: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address in Netty ## 1. Vulnerability Su

历史摘要 · 未重新核验 · GitHub Advisory

Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

CVE-2026-59901

The `Bzip2Decoder` handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a m

历史摘要 · 未重新核验 · GitHub Advisory

Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass

CVE-2026-59900

Netty's HTTP/2-to-HTTP/1.x translation layer (`Http2StreamFrameToHttpObjectCodec` and `InboundHttp2ToHttpAdapter`) fails

历史摘要 · 未重新核验 · GitHub Advisory

Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service

CVE-2026-59899

### Impact `HttpContentEncoder` (the superclass of the production handler `HttpContentCompressor`) maintains a per-chann

历史摘要 · 未重新核验 · GitHub Advisory

Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation

CVE-2026-59898

## Summary An attacker can force WebSocket upgrade via the lax V07 (or V08) handshaker by sending `Sec-WebSocket-Version

历史摘要 · 未重新核验 · GitHub Advisory

Netty: TOCTOU in OcspServerCertificateValidator

CVE-2026-56822

### Summary Netty's OcspServerCertificateValidator forwards the SslHandshakeCompletionEvent before the asynchronous OCSP

历史摘要 · 未重新核验 · GitHub Advisory