https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:22:13.171515+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338284 EUVD-2026-338284 2026-10-06T01:22:13.174963+00:00 EUVD-2026-338284 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56353 fkie_cve-2026-56353 2026-10-06T01:22:13.174996+00:00

n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth (a non-default configuration). In affected releases — before 1.123.22, the 2.0.0 through 2.9.2 line, and 2.10.0 — the authentication check on the Chat Trigger webhook endpoint can be circumvented, allowing access without valid credentials. Fixed in 1.123.22, 2.9.3, and 2.10.1.

 https://cve.radiocsirt.org/vuln/ghsa-455f-pg36-wx7g GHSA-455f-pg36-wx7g 2026-10-06T01:22:13.175029+00:00

n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth (a non-default configuration). In affected releases — before 1.123.22, the 2.0.0 through 2.9.2 line, and 2.10.0 — the authentication check on the Chat Trigger webhook endpoint can be circumvented, allowing access without valid credentials. Fixed in 1.123.22, 2.9.3, and 2.10.1.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0248 NCSC-2026-0248 — Kwetsbaarheden verholpen in n8n workflow automation platform 2026-10-06T01:22:13.175049+00:00 NCSC-2026-0248 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0532 WID-SEC-W-2026-0532 — n8n: Mehrere Schwachstellen 2026-10-06T01:22:13.175079+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um Daten zu manipulieren, um einen SQL-Injection Angriff durchzuführen, und um einen Cross-Site Scripting Angriff durchzuführen.