https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T07:28:00.464661+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-7h4q-fvx6-p3h4 GHSA-7h4q-fvx6-p3h4 2026-11-15T07:28:00.466862+00:00

n8n before 2.46.1 contains an arbitrary file read vulnerability that allows authenticated members to read server files by supplying absolute paths to the Browser Use browser_upload tool. Attackers with a connected remote browser session can have Playwright read files such as instance configuration from the n8n server and retrieve their contents from the page.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4192 WID-SEC-W-2026-4192 — n8n: Mehrere Schwachstellen 2026-11-15T07:28:00.466922+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.