PT-2026-60115 · N8N · N8N

Akirilov · Publicado 2026-07-15 · Atualizado 2026-07-15 · CVE-2026-56349

NVD

CVSS v4.0

6.3

Média

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malicious inputs to circumvent guardrail protections and compromise workflow integrity.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2026-56349

Produtos afetados

N8N

Referências · 3

• https://github.com/n8n-io/n8n/security/advisories/GHSA-fvfv-ppw4-7h2w · Aviso do Fabricante
• https://vulncheck.com/advisories/n8n-guardrail-node-bypass-via-crafted-input · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-56349 · Nota de Segurança