Prototype Pollution in N8n-io N8n

CVE-2026-44791

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with ot…

Vulnerability class: Prototype Pollution

Affected products

  • N8n-io N8n — versions < 1.123.43, >= 2.0.0-rc.0, < 2.20.7, >= 2.21.0, < 2.21.1

Weakness classification (CWE)

References