Loading story…
A high-severity DOM-based XSS flaw tracked as CVE-2026-65597 affects n8n's HTML preview feature, where execution output is rendered into an iframe using srcdoc without a sandbox attribute. The weakness allows a sanitizer bypass and same-origin script execution in the editor context, enabling an attacker to trigger authenticated actions through a victim's active session. The issue affects n8n before 1.123.64, 2.x before 2.29.8, and versions before 2.30.1.
An attacker with global:member privileges can create or modify a workflow so a malicious payload is stored in execution output and later executed when an administrator opens the HTML preview panel. Reports say the injected script can access the parent window, steal session data from localStorage or cookies, and exfiltrate it to an attacker-controlled server, effectively enabling session hijacking and API abuse. The vendor mitigated the flaw by sandboxing the iframe in the patched implementation.
See affected versions and whether adversaries are exploiting it.
1 event from the most recent confirmed update back to the earliest known activity.
A DOM-based XSS vulnerability in n8n's HTML preview feature was disclosed, describing how an unsandboxed same-origin iframe srcdoc could allow a global:member user to execute script in the editor context and abuse an authenticated victim's session. The issue affects n8n versions before 1.123.64, 2.x before 2.29.8, and versions before 2.30.1, with mitigation described as adding iframe sandboxing.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A stored DOM-based cross-site scripting flaw tracked as **`CVE-2026-65592`** affects the n8n workflow automation platform, allowing authenticated users with workflow creation or editing rights to plant a malicious URI in the Resource Locator component's **`cachedResultUrl`** field. The value is saved in workflow metadata and later passed to **`window.open()`** without validating the URL scheme, so a victim who opens the crafted workflow and clicks the external resource link can trigger attacker-controlled JavaScript in their browser. The vulnerability affects n8n versions before **`1.123.64`**, before **`2.29.8`**, and before **`2.30.1`**. Reports say the bug could enable session hijacking or abuse of n8n API access available to the victim user, and classify the issue as **CWE-79** with network attackability, low attack complexity, low privileges required, and user interaction required. Recommended remediation is to upgrade to a fixed release and enforce strict scheme validation so only safe **`http`** and **`https`** URLs are accepted in **`cachedResultUrl`**.
Jul 23, 2026
A **critical remote code execution** issue in the *n8n* open-source workflow automation platform, tracked as **CVE-2026-25049** (also published as **GHSA-6cqr-8cfr-67f8**), allows an **authenticated** user with permission to create or modify workflows to escape n8n’s expression sandbox and execute arbitrary system commands on the underlying host. The flaw stems from **insufficient input sanitization/weak sandboxing** in n8n’s expression evaluation (server-side JavaScript) and was identified during follow-up analysis after an earlier critical n8n vulnerability (**CVE-2025-68613**) was patched; researchers report the new issue effectively **bypasses prior mitigations**. Reporting indicates exploitation can lead to **full compromise** of the n8n instance, including access to the filesystem and the ability to **steal stored credentials and secrets** (e.g., API keys, OAuth tokens) and sensitive configuration, with potential for **pivoting** into connected internal services and cloud accounts in multi-tenant deployments. Public reporting also notes **public exploits** are available. n8n maintainers state the issue is patched, and affected organizations should upgrade to fixed releases (**1.123.17** and **2.5.2**), as versions **prior to 1.123.17 and 2.5.2** are impacted.
Jun 29, 2026
Security researchers and CVE disclosures reported multiple vulnerabilities in the *n8n* workflow automation platform that can enable **remote code execution (RCE)**, **sandbox escapes**, and **stored XSS** under various conditions. Akamai highlighted exploitation interest from **Zerobot** targeting n8n via **CVE-2025-68613**, a critical expression-evaluation sandboxing failure affecting versions `0.211.0` through `1.20.4` (and `1.21.1`/`1.22.0`), where a logged-in (non-admin) user could break out of the expression context to execute arbitrary code, read/write server files, steal environment variables (e.g., API keys), and establish persistence; a public PoC was noted as available. Subsequent advisories describe additional n8n flaws patched after the earlier expression-sandbox issue, generally requiring an authenticated user who can create/modify workflows, except where noted. **CVE-2026-27577** covers further expression-evaluation abuse leading to host command execution; **CVE-2026-27495** describes a **JavaScript Task Runner** sandbox escape that can lead to full host compromise when internal runners are used (enabled via `N8N_RUNNERS_ENABLED=true`), with external runner mode (`N8N_RUNNERS_MODE=external`) reducing blast radius; **CVE-2026-27497** describes potential RCE and arbitrary file write via the **Merge node** in SQL query mode; and **CVE-2026-27578** describes **stored XSS** across multiple nodes (e.g., Webhook/Form/Chat-related nodes) enabling session hijacking/account takeover when victims view affected pages. **CVE-2026-27493** adds a second-order, potentially **unauthenticated** expression injection path via **Form nodes** (triggered by crafted input beginning with `=` under specific workflow configurations) that can escalate to RCE only when chained with a separate sandbox escape. Fixes are reported in n8n `2.10.1` (and, depending on branch, `2.9.3` / `1.123.22`), with interim mitigations including restricting workflow edit permissions and disabling specific nodes via `NODES_EXCLUDE` (e.g., `n8n-nodes-base.webhook`, `n8n-nodes-base.merge`, `n8n-nodes-base.form`, `n8n-nodes-base.formTrigger`).
Jun 29, 2026