n8n

Latest 2.44.5 Oct 21, 2026

Latest per track

Track	Latest	Released
2	2.44.5	Oct 21, 2026
1	1.123.85	Oct 14, 2026

2.43.5 Oct 14, 2026 → 2.44.5 Release notes ↗ 11security1fix1feature

securityFixes GHSA-mp7q-23hg-35cf: Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting

securityFixes GHSA-wvjj-qg37-pv73: Crafted Workflow ID Gives Access to Data Tables in Other Projects

securityFixes GHSA-m7gv-mpg5-7c9v: Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block

securityFixes GHSA-pcr3-v5vr-qppf: Per-User Credential Theft via Error-Workflow Execution Context Inheritance

5.3 GHSA-mgpr-56r4-5c67 OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes

5.1 GHSA-8vrr-mgc5-jg55 Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value

5.3 GHSA-crfj-5wv6-8v86 SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data

5.1 GHSA-8crx-5h96-q72q Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard

5.1 GHSA-v9cx-v88r-42vw Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted

5.1 GHSA-pcr3-v5vr-qppf Per-User Credential Theft via Error-Workflow Execution Context Inheritance

5.9 GHSA-cwm2-vhf5-27q9 Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance

6.3 GHSA-3c3p-5959-3ghr Unauthenticated Slack Token Exfiltration and Full-Response SSRF via the Slack Trigger Webhook

5.3 GHSA-43v8-hjhm-chjp Chat Hub: chat-only users can register tool types the product already tries to sandbox

5.3 GHSA-65mv-v8rp-54wc Quick Base Node Allows Filter Injection Through the Where Parameter

5.3 GHSA-qmvv-q3c9-wpp7 Credential Secrets Exposed in Execution Error Data of Several Nodes

7.1 GHSA-m7gv-mpg5-7c9v Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block

7.2 GHSA-wvjj-qg37-pv73 Crafted Workflow ID Gives Access to Data Tables in Other Projects

8.4 GHSA-mp7q-23hg-35cf Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting

7.1 GHSA-fvv4-gmv9-xqf5 Prototype Pollution in Workflow History Compaction Causes Denial of Service

6.1 GHSA-2r5r-xgvc-rj4p Cross-Project Agent Ownership Transfer via Client-Supplied Agent ID

6.0 GHSA-3p2g-2wpm-8h3g Prototype Pollution in the AI Workflow Builder Connection Merge

6.3 GHSA-4c7j-qff5-r9cx Unauthenticated Cross-Project Workflow Execution via Webhook Path-Only Resolution

6.1 GHSA-p3pg-xw4f-m72c Cross-User Agent Chat Resume Allows Hijacking Another User's Pending Tool Approval

7.0 GHSA-x5cw-hm7v-q7mj n8n Chat Trigger Stored XSS via customCss Parameter on Hosted-Chat Page