PT-2026-56436 · N8N · N8N

Yohannslm · Publicado 2026-07-08 · Atualizado 2026-07-08 · CVE-2026-56359

Mitre

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

n8n before 2.8.0 contains a cross-site scripting vulnerability in the credential management flow where authenticated users can inject malicious JavaScript URLs into OAuth2 credential Authorization URL fields. Attackers can craft malicious credentials and trick victims into clicking the OAuth authorization button, executing arbitrary scripts in their browser session with the victim's privileges.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-56359

Produtos afetados

N8N

Referências · 3

• https://github.com/n8n-io/n8n/security/advisories/GHSA-364x-8g5j-x2pr · Aviso do Fabricante
• https://vulncheck.com/advisories/n8n-cross-site-scripting-in-credential-management-oauth2-authorization-url · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-56359 · Nota de Segurança