CVE-2026-56349
n8n - Guardrail Node Bypass via Crafted Input
- State
- Published
- Severity
- 6.3 Medium
- Published
- Jul 15, 2026
- Updated
- Jul 15, 2026
- Reserved
- Jun 20, 2026
Description
n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malicious inputs to circumvent guardrail protections and compromise workflow integrity.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.3 Medium | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulnCheck |
Weaknesses
- CWE-20 Improper Input Validation
Affected Products
| Product | Versions |
|---|---|
n8nn8n |
|
References
- GitHub Security Advisory (GHSA-fvfv-ppw4-7h2w)vendor-advisory
- VulnCheck Advisory: n8n - Guardrail Node Bypass via Crafted Inputthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.