CyberRota Analysis
AI-GeneratedA stored DOM cross-site scripting vulnerability exists in n8n versions prior to 1.123.80 and from 2.0.0 before 2.39.6, allowing workflow authors to inject malicious script URLs into Resource Locator parameters. This can lead to the execution of arbitrary JavaScript in the editor context when other users interact with the affected dropdown links, with the malicious payload persisting across workflow imports and shares. Organizations using n8n, particularly those with collaborative workflow environments, should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor origin when other users open the node dropdown and click the external-link icon, with the payload persisting across workflow imports and shares.