https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:40:15.423144+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-54308 CVE-2026-54308 — n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node 2026-10-09T06:40:15.438328+00:00

Affected: n8n-io n8n

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent365Trigger and StripeTrigger node did not validate that inbound requests. As a result, an unauthenticated attacker who knows the webhook URL could submit a forged payload and cause the workflow to execute with attacker-controlled data. This vulnerability is fixed in 2.25.7 and 2.26.2.