p PatchFirst

CVE-2026-56349

CVE-2026-56349 · n8n - Guardrail Node Bypass via Crafted Input

This page contains facts from public vulnerability sources. Check the original advisory before updating.

n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malicious inputs to circumvent guardrail protections and compromise workflow integrity.

CVSS 6.3 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • n8n

    Versions
    • ≥ 0, < 2.10.0: Affected (semver)
    • 2.10.0: Not affected (semver)

    Update to 2.10.0

  • n8n npm

    Affected ranges
    • SEMVER: < 2.10.0

    Update to 2.10.0

Original sources

Check your server →