Which versions of Prototype Pollution are affected by CVE-2026-33696?

A critical vulnerability in n8n workflow automation platform allows authenticated users to execute arbitrary code, potentially compromising all systems and data accessible through affected instances.. A patch is available.

Is there a public PoC exploit available for CVE-2026-33696?

Yes, a public proof-of-concept exploit is available for CVE-2026-33696. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate CVE-2026-33696?

Within 24 hours: Inventory all n8n instances and document current versions; audit user access logs for XML and GSuiteAdmin node usage; restrict workflow creation/modification permissions to essential personnel only. Within 7 days: Test and deploy patched versions (2.14.1, 2.13.3, or 1.123.27) in a staged manner beginning with non-production environments. Within 30 days: Complete production patching; conduct post-patch verification; perform forensic review of workflow logs for suspicious activity during the vulnerability window; update access control policies to enforce least-privilege principles.

Prototype Pollution CVE-2026-33696

Q: What is the CVSS score of CVE-2026-33696?

CVE-2026-33696 has a CVSS 4.0 base score of 9.4 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

EUVD-2026-15945 CRITICAL

Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) (CWE-1321)

2026-03-25 GitHub_M

GHSA-mxrg-77hm-89hv

Prototype Pollution RCE

9.4

CVSS 4.0 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.4 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

PoC Detected

Mar 27, 2026 - 19:40 vuln.today

Public exploit code

EUVD ID Assigned

Mar 25, 2026 - 18:01 euvd

EUVD-2026-15945

Analysis Generated

Mar 25, 2026 - 18:01 vuln.today

CVE Published

Mar 25, 2026 - 17:40 nvd

CRITICAL 9.4

DescriptionGitHub Advisory

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with permission to create or modify workflows could exploit a prototype pollution vulnerability in the XML and the GSuiteAdmin nodes. By supplying a crafted parameters as part of node configuration, an attacker could write attacker-controlled values onto Object.prototype. An attacker could use this prototype pollution to achieve remote code execution on the n8n instance. The issue has been fixed in n8n versions 2.14.1, 2.13.3, and 1.123.27. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations: Limit workflow creation and editing permissions to fully trusted users only, and/or disable the XML node by adding n8n-nodes-base.xml to the NODES_EXCLUDE environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

Articles & Coverage 2

vuln.today Threat Landscape 23/03-30/03/2026: Supply Chain Attacks and Auth Failures Surge Mar 30, 2026 medium.com CVE-2026-33696: n8n Prototype Pollution RCE in XML and GSuite Admin

AnalysisAI

A prototype pollution vulnerability in the XML and GSuiteAdmin nodes of n8n workflow automation platform allows authenticated users with workflow creation or modification permissions to achieve remote code execution. Versions prior to 2.14.1, 2.13.3, and 1.123.27 are affected. The CVSS score of 9.4 (Critical) reflects network-based exploitation with low complexity requiring only low-level authentication, though no current KEV listing or public POC availability is indicated in the provided intelligence.

Technical ContextAI

The vulnerability affects n8n (CPE: cpe:2.3:a:n8n-io:n8n), an open-source workflow automation platform built on Node.js. The issue stems from CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes, commonly known as Prototype Pollution), a JavaScript-specific vulnerability class where attackers can inject properties into Object.prototype. In this case, the XML and GSuiteAdmin nodes fail to properly validate or sanitize node configuration parameters, allowing crafted input to pollute the prototype chain. Because JavaScript property lookups traverse the prototype chain, pollution of Object.prototype affects all objects in the runtime, enabling attackers to override critical properties and achieve code execution through subsequent operations that rely on these polluted values.

RemediationAI

Upgrade n8n to version 2.14.1, 2.13.3, or 1.123.27 or later immediately to fully remediate this vulnerability. Consult the official GitHub security advisory at https://github.com/n8n-io/n8n/security/advisories/GHSA-mxrg-77hm-89hv for version-specific upgrade guidance. If immediate patching is not feasible, implement temporary mitigations by restricting workflow creation and editing permissions exclusively to fully trusted users, and disable the XML node by adding n8n-nodes-base.xml to the NODES_EXCLUDE environment variable. Note that these workarounds provide only partial risk reduction and should be considered short-term measures only, as the GSuiteAdmin node remains a potential attack vector. Organizations should prioritize full version upgrades and conduct security reviews of existing workflows created by potentially untrusted users during the vulnerable period.