CVE-2026-110848
CVE-2026-110848 · n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge
This page contains facts from public vulnerability sources. Check the original advisory before updating.
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys. Authenticated users can create nodes named __proto__ through the API and invoke the connect-nodes operation to pollute the global object prototype, disrupting the instance until restart.
CVSS 6.0 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
n8n
- Versions
- ≥ 0, < 1.123.83: Affected (semver)
- ≥ 2.0.0, < 2.41.4: Affected (semver)
- ≥ 2.42.0, < 2.42.1: Affected (semver)
Update to 1.123.83; Update to 2.41.4; Update to 2.42.1