CVE-2026-44791

CRITICAL

n8n: XML Node Prototype Pollution Patch Bypass

Title source: cna
STIX 2.1

Description

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this could lead to RCE on the n8n host. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

References (1)

Core 1
Core References

Scores

CVSS v3 9.9
EPSS 0.0063
EPSS Percentile 46.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-1321
Status published
Products (7)
n8n/n8n < 1.123.43
n8n-io/n8n < 1.123.43
n8n-io/n8n >= 2.0.0-rc.0, < 2.20.7
n8n-io/n8n >= 2.21.0, < 2.21.1
npm/n8n 0 - 1.123.43npm
npm/n8n 2.0.0-rc.0 - 2.20.7npm
npm/n8n 2.21.0 - 2.22.1npm
Published Jun 23, 2026
Tracked Since Jun 23, 2026