EUVD-2026-47641
GHSA-p3rg-hrf9-w9gj
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Authenticated member account (PR:L) and victim opening the preview (UI:R); injected script escapes the iframe into the editor origin, so S:C with high confidentiality and low integrity impact, no availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scripting vulnerability in the HTML preview, which renders execution output into an iframe srcdoc without the sandbox attribute. A sanitizer bypass allows injected script to execute same-origin as the editor. When a victim opens the preview, the script can call authenticated APIs using the victim's session. An account with global:member privileges can exploit the issue.
AnalysisAI
DOM-based cross-site scripting in n8n's HTML preview lets an authenticated global:member user execute JavaScript in the editor's same origin when a victim opens the preview. Because execution output is rendered into an iframe srcdoc without the sandbox attribute and a sanitizer bypass defeats the filtering, injected script runs same-origin and can invoke authenticated APIs using the victim's session, enabling account and workflow takeover. No public exploit identified at time of analysis; the flaw was reported by VulnCheck and is fixed in n8n 1.123.64, 2.29.8, and 2.30.1.
Technical ContextAI
n8n is a self-hostable, source-available workflow automation platform (Node.js/Vue front end) where nodes produce execution output that users can render via an HTML preview. The preview embeds output into an <iframe srcdoc=...> but omits the sandbox attribute, so the framed document inherits the parent editor's origin and privileges instead of being isolated. Combined with a bypass of the output sanitizer, this yields CWE-79 (Improper Neutralization of Input During Web Page Generation). The missing sandbox is the pivotal control failure: with sandboxing, injected markup would run in an opaque, script-restricted origin; without it, the injected script shares the editor session and cookies, escalating a contained XSS into a same-origin API-abuse primitive. CPE data (cpe:2.3:a:n8n-io:n8n:*) confirms the affected product is the n8n-io n8n application across all listed version ranges.
RemediationAI
Vendor-released patch: upgrade to n8n 1.123.64, 2.29.8, or 2.30.1 (whichever matches your release line) per advisory GHSA-p3rg-hrf9-w9gj (https://github.com/n8n-io/n8n/security/advisories/GHSA-p3rg-hrf9-w9gj). Until patched, reduce exposure by tightening membership on shared instances - audit and remove untrusted global:member accounts and restrict who can author workflows or nodes whose output others will preview, since the attack requires a member-level account to plant the payload. Avoid opening HTML previews of workflows or executions authored by untrusted users, and where feasible front the editor with a strict Content-Security-Policy that disallows inline script execution to blunt DOM XSS (note this may break legitimate UI features and does not fully substitute for the fix). These are compensating controls only; applying the patched version is the reliable remedy.
n8n workflow automation (through 1.121.2) allows authenticated users to execute arbitrary code via the n8n service, with
n8n workflow automation (1.65.0 to 1.121.0) allows unauthenticated file access through form-based workflows. A critical
n8n has a fifth critical RCE vulnerability (CVSS 9.9) in the Expression evaluator, enabling code execution through craft
A prototype pollution vulnerability in the XML and GSuiteAdmin nodes of n8n workflow automation platform allows authenti
An authenticated user with workflow creation or modification privileges in n8n workflow automation platform can exploit
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function w
Authenticated n8n users can hijack administrator accounts when LDAP authentication is enabled by manipulating their LDAP
The n8n package 0.218.0 for Node.js allows Escalation of Privileges. Rated high severity (CVSS 8.8), this vulnerability
SQL injection in n8n's Data Table Get node allows authenticated users with workflow modification permissions to execute
Authenticated users can exploit string formatting and exception handling in n8n's Python task executor to escape sandbox
n8n workflow automation platform Community Edition contains an authorization bypass vulnerability allowing authenticated
The n8n package 0.218.0 for Node.js allows Information Disclosure. Rated high severity (CVSS 7.5), this vulnerability is
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today