https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T07:27:49.850857+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-wp5v-mcm8-v3ch GHSA-wp5v-mcm8-v3ch 2026-11-15T07:27:49.852918+00:00

n8n before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 contains a flaw in the OAuth2 credential callback of the dynamic-credential connect flow, which does not verify that the completing browser belongs to the user who started the flow. Members with access to a resolvable OAuth2 credential can send the provider authorization URL to a victim; if the victim consents without an active n8n session, the victim's tokens are stored under the member's identity, letting the member's workflows act as the victim.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4192 WID-SEC-W-2026-4192 — n8n: Mehrere Schwachstellen 2026-11-15T07:27:49.852993+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.