← All credits
sm1ee
10 vulnerability records and advisories credit this contributor.
CVE-2026-126387
n8n before 2.46.1 Arbitrary File Read via Browser Use browser_upload Tool
CVE-2026-126385
n8n before 2.46.1 OAuth Account Hijack via Unauthenticated Credential Callback
CVE-2026-118644
n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance
CVE-2026-118643
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data
CVE-2026-72775
n8n before 1.123.67 SQL Injection via PostgresTrigger Node
CVE-2026-118641
n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes
CVE-2026-110851
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint
CVE-2026-110850
n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters
CVE-2026-110842
n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter
CVE-2026-56353
n8n - Authentication Bypass in Chat Trigger Node