GHSA-v3wp-jvw4-xcp3Medium
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution...
🔗 CVE IDs covered (1)
📋 Description
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys. Authenticated users can create nodes named proto through the API and invoke the connect-nodes operation to pollute the global object prototype, disrupting the instance until restart.
🔗 References (4)
- https://github.com/n8n-io/n8n/security/advisories/GHSA-3p2g-2wpm-8h3g
- https://nvd.nist.gov/vuln/detail/CVE-2026-110848
- https://www.vulncheck.com/advisories/n8n-before-1.123.83-2.41.4-and-2.42.1-prototype-pollution-via-ai-workflow-builder-connection-merge
- https://github.com/advisories/GHSA-v3wp-jvw4-xcp3