N8N N8N — CVE-2026-44789 (Critical)

Date Jun 23, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product N8N · N8N

CVE CVE-2026-44789

Critical vendor advisory CVE-2026-44789

Summary

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via an unvalidated pagination parameter in the HTTP Request node. Combined with other techniques this could lead to RCE on the instance. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.9) in N8N N8N. Patch or mitigate promptly. EPSS percentile: 40%.

Operator check

Review CVE-2026-44789 in your asset inventory. Apply patches per vendor guidance and verify N8N is not exposed. CVSS score: 9.9. EPSS probability: 0.5%; percentile: 40%.

Sources

NVD — CVE-2026-44789 Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed