https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:09:41.105941+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351126 EUVD-2026-351126 2026-10-04T00:09:41.158570+00:00 EUVD-2026-351126 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72762 fkie_cve-2026-72762 2026-10-04T00:09:41.158605+00:00

n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation. An authenticated user able to run workflows can supply a crafted format value to write arbitrary files outside the node's working directory on the n8n instance.

 https://cve.radiocsirt.org/vuln/ghsa-rwvr-8f8w-f6hc GHSA-rwvr-8f8w-f6hc 2026-10-04T00:09:41.158639+00:00

n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation. An authenticated user able to run workflows can supply a crafted format value to write arbitrary files outside the node's working directory on the n8n instance.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2489 WID-SEC-W-2026-2489 — n8n: Mehrere Schwachstellen 2026-10-04T00:09:41.158657+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.