n8n before 2.44.1 and 2.43.5 can expose other projects' data tables
Canada's Cyber Centre says a crafted workflow ID can reach data tables in other n8n projects and urges updates.
40
- Mentions · 7d1
- Mentions · 30d3
- All mentions7
- First seenSep 3, 2026
- Last mentioned1d ago
Timeline
7 articles · newest firstn8n security advisory (AV26-1044)
Canada’s Cyber Centre urges updates for n8n SQL injection and workflow credential-check flaws.
48
n8n security advisory (AV26-985)
Canada's Cyber Centre warns n8n builds before 1.123.80, 2.39.6, and 2.40.1 have validation-bypass and token-leak flaws.
48
Weird Machine Compositors: Exploiting AI Orchestration at the Expression Layer
Paper shows n8n expression sandboxes can be bypassed, citing three CVEs including two CVSS 9.4 flaws.
66
n8n security advisory (AV26-916)
Canadian Cyber Centre advisory AV26-916 warns n8n before versions 2.37.7, 2.38.2, and 1.123.76 is affected by an undisclosed vulnerability; patch required.
22
A Data-Driven Framework for Identifying and Prioritizing RPA Opportunities in Healthcare Processes
Researchers propose a four-module, data-driven framework to identify, prioritize, and cost-justify RPA candidates among 20 hospital administrative processes, with 12 clearing the threshold.
5
n8n security advisory (AV26-880)
Canada's Cyber Centre flagged multiple n8n vulnerabilities in versions prior to 1.123.76 and several 2.x releases, urging users to update.
22
Appears with
- n8nproduct · 5
- Canadian Centre for Cyber Securityorganization · 4
- n8norganization · 2
- UiPathvendor · 1
- Canadian Centre for Cyber Securityvendor · 1
- US hospitalsorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.