Which versions of n8n are affected by CVE-2026-65592?

A stored cross-site scripting vulnerability (CVE-2026-65592, CVSS 8.4) in n8n's Resource Locator component enables authenticated low-privileged workflow authors to inject malicious JavaScript that…. A patch is available.

How to fix or mitigate CVE-2026-65592?

Within 24 hours, audit your n8n logs for Resource Locator component access, identify all workflows created by non-administrative users, restrict workflow sharing to verified trusted users only, and scan active workflows for suspicious external link configurations containing javascript: URIs. Within 7 days, implement a Content Security Policy (CSP) header to block javascript: scheme execution, disable or hide Resource Locator external link functionality if operationally feasible, and conduct a forensic review of all persisted cachedResultUrl values in your workflow database for malicious payloads. Within 30 days, establish routine monitoring for n8n security advisories, prepare a staged deployment plan for the vendor patch (testing in non-production first), and implement workflow creation approval workflows or permission quotas for non-admin users to reduce attack surface.

n8n CVE-2026-65592

Q: What is the CVSS score of CVE-2026-65592?

CVE-2026-65592 has a CVSS 4.0 base score of 8.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-47636 HIGH

Cross-site Scripting (XSS) (CWE-79)

2026-07-22 VulnCheck

GHSA-9wcp-9r3j-383q

GHSA-h5xr-fqvj-253p

XSS N8n

8.4

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.7 HIGH

Attacker needs workflow-edit rights (PR:L) and victim interaction (UI:R); script runs in the victim's origin crossing a privilege boundary (S:C) enabling session/credential compromise (C:H/I:H, A:N).

3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

Patch available

Jul 22, 2026 - 13:02 EUVD

Analysis Generated

Jul 22, 2026 - 12:24 vuln.today

CVE Published

Jul 22, 2026 - 11:21 cve.org

HIGH 8.4

DescriptionCVE.org

n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResultUrl parameter to window.open() without scheme validation. An attacker with workflow creation/editing privileges can craft a workflow with a malicious (e.g., javascript:) scheme in cachedResultUrl; when a victim opens the crafted workflow and interacts with external links, the payload executes in the victim's browser.

AnalysisAI

Stored DOM cross-site scripting in n8n's Resource Locator component allows a low-privileged workflow author to execute arbitrary JavaScript in another user's browser session. The flaw stems from the workflow-persisted cachedResultUrl value being passed to window.open() without scheme validation, letting a javascript: URI fire when a victim opens the crafted workflow and clicks an external link. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV, but exploitation is realistic in shared/multi-tenant n8n instances.

Technical ContextAI

n8n is a self-hosted, fair-code workflow automation platform (a Node.js/Vue front-end orchestration tool). The Resource Locator is a UI control that lets nodes reference external resources and stores a human-friendly cachedResultUrl alongside the resource ID. Because this cached URL is persisted inside the workflow definition and later handed to window.open() on the client, an attacker-controlled string reaches a DOM sink without output sanitization or scheme allow-listing - the CWE-79 root cause. Browsers treat window.open('javascript:...') as script execution in the opener's origin, turning a stored data field into a DOM-based XSS sink. The affected code path exists in n8n versions prior to 1.123.64, 2.29.8, and 2.30.1 (cpe:2.3:a:n8n-io:n8n).

RemediationAI

Upgrade to a fixed release: n8n 1.123.64 (1.x line), 2.29.8 (2.29 branch), or 2.30.1 (2.30 branch), whichever matches your deployed major/minor version, per vendor advisory GHSA-9wcp-9r3j-383q. Until patching, limit workflow creation/editing to trusted operators and review any shared or imported workflows before opening them, since exploitation requires an attacker-authored workflow - restricting or auditing the pool of workflow authors directly removes the attack surface at the cost of collaboration friction. Avoid opening or clicking external links within untrusted workflows, and consider a browser-side or reverse-proxy Content-Security-Policy that blocks inline/javascript: script execution as defense-in-depth, noting CSP can break legitimate front-end features and should be tested against n8n's UI first.