https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:30:55.092690+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380039 EUVD-2026-380039 2026-10-02T16:30:55.141236+00:00 EUVD-2026-380039 https://cve.radiocsirt.org/vuln/fkie_cve-2026-103252 fkie_cve-2026-103252 2026-10-02T16:30:55.141290+00:00

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request body to interpolate sensitive variables into credential test requests sent to attacker-controlled hosts for exfiltration.

 https://cve.radiocsirt.org/vuln/ghsa-r56q-6p4g-65g7 GHSA-r56q-6p4g-65g7 2026-10-02T16:30:55.141337+00:00

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request body to interpolate sensitive variables into credential test requests sent to attacker-controlled hosts for exfiltration.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3393 WID-SEC-W-2026-3393 — n8n: Mehrere Schwachstellen 2026-10-02T16:30:55.141356+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder Code auszuführen.