Which versions of n8n are affected by CVE-2026-54312?

n8n workflow automation platform (versions prior to 2.24.0) contains a denial-of-service vulnerability where authenticated users with workflow creation or editing permissions can crash the entire…. A patch is available.

How to fix or mitigate CVE-2026-54312?

Within 24 hours: Identify all n8n instances and current versions; assess criticality of dependent workflows. Within 7 days: Upgrade all instances to n8n version 2.24.0 or later in coordination with business stakeholders to minimize disruption. Within 30 days: Verify successful patching across all deployments, audit and restrict workflow creation/edit permissions to necessary personnel, maintain updated version inventory.

n8n CVE-2026-54312

Q: What is the CVSS score of CVE-2026-54312?

CVE-2026-54312 has a CVSS 4.0 base score of 7.2 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-38461 HIGH

Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) (CWE-1321)

2026-06-16 https://github.com/n8n-io/n8n

GHSA-x6p3-m6h9-fx7r

Prototype Pollution Microsoft Information Disclosure

7.2

CVSS 4.0 · Vendor: https://github.com/n8n-io/n8n

Severity by source

Vendor (https://github.com/n8n-io/n8n) PRIMARY

7.2 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Network-reachable n8n API with authenticated workflow-edit role (PR:L), no user interaction, and DoS-only impact until restart yield A:H with C:N/I:N.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (https://github.com/n8n-io/n8n).

CVSS VectorVendor: https://github.com/n8n-io/n8n

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Jun 23, 2026 - 17:15 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 23, 2026 - 17:14 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 23, 2026 - 17:07 vuln.today

cvss_changed

CVSS changed

Jun 23, 2026 - 17:07 NVD

8.5 (HIGH) 7.2 (HIGH)

Source Code Evidence Fetched

Jun 17, 2026 - 00:09 vuln.today

Analysis Generated

Jun 17, 2026 - 00:09 vuln.today

CVE Published

Jun 16, 2026 - 22:38 github-advisory

HIGH 8.5

DescriptionCVE.org

Impact

An authenticated user with permission to create or modify workflows could achieve global prototype pollution via the Microsoft SQL node by supplying a crafted value as the table parameter. This pollutes Object.prototype process-wide for the lifetime of the n8n server process, causing application-wide validation failures and rendering the n8n instance completely non-functional until restarted.

Patches

The issue has been fixed in n8n version 2.24.0. Users should upgrade to this version or later to remediate the vulnerability.

Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:

Limit workflow creation and editing permissions to fully trusted users only.
Disable the Microsoft SQL node by adding n8n-nodes-base.microsoftSql to the NODES_EXCLUDE environment variable.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

AnalysisAI

Denial of service in n8n workflow automation platform (versions prior to 2.24.0) allows an authenticated user with workflow create/edit permissions to trigger global prototype pollution via a crafted table parameter in the Microsoft SQL node. The pollution of Object.prototype persists for the lifetime of the n8n process, causing application-wide validation failures until the server is restarted. No public exploit identified at time of analysis, though the vendor advisory provides clear technical detail.

Technical ContextAI

n8n is a popular Node.js-based workflow automation platform (distributed as the npm package 'n8n'). The flaw is a CWE-1321 Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution), a JavaScript-specific weakness where attacker-controlled keys are merged into objects without sanitizing __proto__, constructor, or prototype properties. In this case the Microsoft SQL node ('n8n-nodes-base.microsoftSql') processes the 'table' parameter in a way that walks into Object.prototype, so a single crafted workflow execution mutates the prototype for every object created by the process thereafter. Because Node.js is single-process and long-lived, the pollution survives until restart and corrupts validation logic globally.

RemediationAI

Vendor-released patch: upgrade n8n to version 2.24.0 or later, as published in GitHub Security Advisory GHSA-x6p3-m6h9-fx7r (https://github.com/n8n-io/n8n/security/advisories/GHSA-x6p3-m6h9-fx7r). If immediate upgrade is not possible, restrict workflow create and edit permissions to fully trusted users only - this materially reduces exposure but breaks self-service workflow authoring for untrusted tenants. As an additional mitigation, disable the Microsoft SQL node by adding 'n8n-nodes-base.microsoftSql' to the NODES_EXCLUDE environment variable, which removes the specific sink at the cost of losing MSSQL integration in any existing workflows. The vendor notes these workarounds do not fully remediate the issue and should be treated as short-term measures only.