PT-2026-6263 · N8N · N8N

Mylong · Published 2026-02-04 · Updated 2026-02-05 · CVE-2026-25054

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.9 n8n versions prior to 2.2.1

Description n8n is a workflow automation platform. A Cross-Site Scripting (XSS) issue existed in a markdown rendering component within the n8n interface, affecting areas that support markdown content, such as workflow sticky notes. An authenticated user with workflow modification permissions could exploit this to execute scripts with same-origin privileges when other users interact with a maliciously crafted workflow. This could potentially lead to session hijacking and account takeover.

Recommendations Update n8n to version 1.123.9 or later. Update n8n to version 2.2.1 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

CWE-80

Related Identifiers

BDU:2026-02169

CVE-2026-25054

GHSA-QPQ4-PW7F-PP8W

Affected Products

N8N

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25054.json · Exploit
• https://github.com/n8n-io/n8n/security/advisories/GHSA-qpq4-pw7f-pp8w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25054 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qpq4-pw7f-pp8w · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02169 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-25054 · Security Note
• https://github.com/n8n-io/n8n · Note
• https://twitter.com/CVEnew/status/2019110902482759872 · Twitter Post
• https://twitter.com/AhammodOvi69/status/2019422819944157578 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2019167792163934347 · Twitter Post