CVE-2026-56354— n8n - Cross-Site Scripting and Open Redirect in Form Node
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by CompromiseGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-56354
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
n8n - Cross-Site Scripting and Open Redirect in Form Node
Source: NVD (National Vulnerability Database)
Vulnerability Description
n8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-site scripting and open redirect vulnerabilities in the Form Node due to unsanitized HTML description fields and overly permissive iframe sandbox policies. Authenticated users with workflow creation permissions can inject malicious scripts or redirect parameters to perform stored XSS attacks or phishing redirects against end users.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-56354
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-56354
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-56354 (1)
News Coverage for CVE-2026-56354 (1)
IV. Related Vulnerabilities
Same product: n8n
- CVE-2026-58661
n8n - Disk Space Exhaustion via Data-Table File Upload Endpo - CVE-2026-59209
n8n: Shared Credential Header Leak via HTTP Request Paginati - CVE-2026-59206
n8n: Prototype Pollution via Workflow Credentials Leads to U - CVE-2026-59208
n8n: Cross-Issuer Token Exchange Account Binding via Subject - CVE-2026-59207
n8n: "Allowed HTTP Request Domains" Restriction Bypass via A
Same vendor: n8n
- CVE-2026-58661
n8n - Disk Space Exhaustion via Data-Table File Upload Endpo - CVE-2026-59257
n8n - SQL Injection in MySQL v1 executeQuery Operation via E - CVE-2026-59253
n8n - Improper Authorization in Workflow Assignment to Folde - CVE-2026-56778
n8n - Authorization Bypass in Public API Execution Retry End - CVE-2026-56776
n8n - Incorrect OAuth Scope Validation in Workflow Test Run
Same weakness: CWE-79
- CVE-2026-55808
Drupal core - Moderately critical - Improper validation - SA - CVE-2026-15085
AI SEO/GEO Analyzer - Moderately critical - Cross-site Scrip - CVE-2026-15084
UI Patterns (SDC in Drupal UI) - Moderately critical - Cross - CVE-2026-15082
Siteimprove Analytics - Moderately critical - Cross-site Scr - CVE-2026-58591
Colorbox - Moderately critical - Cross-site scripting - SA-C
V. Comments for CVE-2026-56354
No comments yet