n8n 2.40.7 → 2.44.6
18 releases · 0 breaking changes · 27 security fixes · 27 advisories fixed
27security0breaking0deprecated8feature22fix
Vulnerabilities fixed by this upgrade
- 5.3 GHSA-mgpr-56r4-5c67 OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes
- 5.1 GHSA-8vrr-mgc5-jg55 Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value
- 5.3 GHSA-crfj-5wv6-8v86 SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data
- 5.1 GHSA-8crx-5h96-q72q Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard
- 5.1 GHSA-v9cx-v88r-42vw Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted
- 5.1 GHSA-pcr3-v5vr-qppf Per-User Credential Theft via Error-Workflow Execution Context Inheritance
- 5.9 GHSA-cwm2-vhf5-27q9 Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance
- 6.3 GHSA-3c3p-5959-3ghr Unauthenticated Slack Token Exfiltration and Full-Response SSRF via the Slack Trigger Webhook
- 5.3 GHSA-43v8-hjhm-chjp Chat Hub: chat-only users can register tool types the product already tries to sandbox
- 5.3 GHSA-65mv-v8rp-54wc Quick Base Node Allows Filter Injection Through the Where Parameter
- 5.3 GHSA-qmvv-q3c9-wpp7 Credential Secrets Exposed in Execution Error Data of Several Nodes
- 7.1 GHSA-m7gv-mpg5-7c9v Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block
- 7.2 GHSA-wvjj-qg37-pv73 Crafted Workflow ID Gives Access to Data Tables in Other Projects
- 8.4 GHSA-mp7q-23hg-35cf Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting
- 7.1 GHSA-fvv4-gmv9-xqf5 Prototype Pollution in Workflow History Compaction Causes Denial of Service
- 6.1 GHSA-2r5r-xgvc-rj4p Cross-Project Agent Ownership Transfer via Client-Supplied Agent ID
- 6.0 GHSA-3p2g-2wpm-8h3g Prototype Pollution in the AI Workflow Builder Connection Merge
- 6.3 GHSA-4c7j-qff5-r9cx Unauthenticated Cross-Project Workflow Execution via Webhook Path-Only Resolution
- 6.1 GHSA-p3pg-xw4f-m72c Cross-User Agent Chat Resume Allows Hijacking Another User's Pending Tool Approval
- 7.0 GHSA-x5cw-hm7v-q7mj n8n Chat Trigger Stored XSS via customCss Parameter on Hosted-Chat Page
- 7.7 GHSA-x8wx-g24x-3549 Code Execution in the Git Node Log Operation via Unneutralized Repository Configuration
- 7.7 GHSA-5jr4-xmvf-frmj Shared Prototype Mutation Through the MCP Workflow-Validation Interpreter Allows Owner Account Takeover
- 7.0 GHSA-728h-pmr2-7cgh Send-and-Wait HMAC Bypass Allows Unauthenticated Approval of Waiting Executions
- 7.2 GHSA-x25p-9mr6-cwgp Shared-Workflow Credential Check Misses Agent Node Parameter Credentials
- 7.0 GHSA-5qpp-pqww-h7fp SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field
- 7.2 GHSA-29xw-66fq-4xc3 Stored XSS via Same-Origin Blob URL in the Binary-Data File Preview
- 8.2 GHSA-3qcw-p65v-c7vq Unauthenticated Unbounded OAuth Client Persistence via the Authorize Endpoint
Breaking changes
None in the release notes.
Security changes
- security Fixes GHSA-mp7q-23hg-35cf: Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting in 2.43.5
- security Fixes GHSA-wvjj-qg37-pv73: Crafted Workflow ID Gives Access to Data Tables in Other Projects in 2.43.5
- security Fixes GHSA-m7gv-mpg5-7c9v: Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block in 2.43.5
- security Fixes GHSA-mgpr-56r4-5c67: OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes in 2.43.5
- security Fixes GHSA-crfj-5wv6-8v86: SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data in 2.43.5
- security Fixes GHSA-43v8-hjhm-chjp: Chat Hub: chat-only users can register tool types the product already tries to sandbox in 2.43.5
- security Fixes GHSA-65mv-v8rp-54wc: Quick Base Node Allows Filter Injection Through the Where Parameter in 2.43.5
- security Fixes GHSA-qmvv-q3c9-wpp7: Credential Secrets Exposed in Execution Error Data of Several Nodes in 2.43.5
- security Fixes GHSA-8vrr-mgc5-jg55: Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value in 2.43.5
- security Fixes GHSA-8crx-5h96-q72q: Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard in 2.43.5
- security Fixes GHSA-v9cx-v88r-42vw: Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted in 2.43.5
- security Fixes GHSA-pcr3-v5vr-qppf: Per-User Credential Theft via Error-Workflow Execution Context Inheritance in 2.41.5
- security Fixes GHSA-3qcw-p65v-c7vq: Unauthenticated Unbounded OAuth Client Persistence via the Authorize Endpoint in 2.41.4
- security Fixes GHSA-x8wx-g24x-3549: Code Execution in the Git Node Log Operation via Unneutralized Repository Configuration in 2.41.4
- security Fixes GHSA-5jr4-xmvf-frmj: Shared Prototype Mutation Through the MCP Workflow-Validation Interpreter Allows Owner Account Takeover in 2.41.4
- security Fixes GHSA-x25p-9mr6-cwgp: Shared-Workflow Credential Check Misses Agent Node Parameter Credentials in 2.41.4
- security Fixes GHSA-29xw-66fq-4xc3: Stored XSS via Same-Origin Blob URL in the Binary-Data File Preview in 2.41.4
- security Fixes GHSA-fvv4-gmv9-xqf5: Prototype Pollution in Workflow History Compaction Causes Denial of Service in 2.41.4
- security Fixes GHSA-x5cw-hm7v-q7mj: n8n Chat Trigger Stored XSS via customCss Parameter on Hosted-Chat Page in 2.41.4
- security Fixes GHSA-728h-pmr2-7cgh: Send-and-Wait HMAC Bypass Allows Unauthenticated Approval of Waiting Executions in 2.41.4
- security Fixes GHSA-5qpp-pqww-h7fp: SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field in 2.41.4
- security Fixes GHSA-3c3p-5959-3ghr: Unauthenticated Slack Token Exfiltration and Full-Response SSRF via the Slack Trigger Webhook in 2.41.4
- security Fixes GHSA-4c7j-qff5-r9cx: Unauthenticated Cross-Project Workflow Execution via Webhook Path-Only Resolution in 2.41.4
- security Fixes GHSA-2r5r-xgvc-rj4p: Cross-Project Agent Ownership Transfer via Client-Supplied Agent ID in 2.41.4
- security Fixes GHSA-p3pg-xw4f-m72c: Cross-User Agent Chat Resume Allows Hijacking Another User's Pending Tool Approval in 2.41.4
- security Fixes GHSA-3p2g-2wpm-8h3g: Prototype Pollution in the AI Workflow Builder Connection Merge in 2.41.4
- security Fixes GHSA-cwm2-vhf5-27q9: Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance in 2.41.4
Every release in between
fixPostgres Node: Prevent global pgtypes overwrite () (654315e)
fixcore: Key queue job outcomes by job on shutdown resume () (1f074d4)
fixeditor: Load credential types on startup () (6ff3198)
fixcore: Reuse connections in the log streaming webhook destination () (b79afe2)
fixcore: Turn off expression spans by default () (6965193)
fixcore: Turn off expression spans by default () (e88162a)
featurecore: Suspend in-flight production executions at worker shutdown () (5863179)
fixcore: Create an XML parser for each webhook request body () (ea3ee53)
securityFixes GHSA-mp7q-23hg-35cf: Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting
securityFixes GHSA-wvjj-qg37-pv73: Crafted Workflow ID Gives Access to Data Tables in Other Projects
securityFixes GHSA-m7gv-mpg5-7c9v: Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block
securityFixes GHSA-mgpr-56r4-5c67: OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes
securityFixes GHSA-crfj-5wv6-8v86: SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data
securityFixes GHSA-43v8-hjhm-chjp: Chat Hub: chat-only users can register tool types the product already tries to sandbox
securityFixes GHSA-65mv-v8rp-54wc: Quick Base Node Allows Filter Injection Through the Where Parameter
securityFixes GHSA-qmvv-q3c9-wpp7: Credential Secrets Exposed in Execution Error Data of Several Nodes
securityFixes GHSA-8vrr-mgc5-jg55: Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value
securityFixes GHSA-8crx-5h96-q72q: Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard
securityFixes GHSA-v9cx-v88r-42vw: Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted
fixcore: Validate the size argument of the chunk() expression extension () (4bf0ece)
featureShow Gemini models by name and list prioritized models first in model pickers () (66cece2)
fixcore: Handle each Chat Hub segment once in queue mode () (dc77062)
fixcore: Resume tool calls for deferred tools that a skill loaded () (ea448c6)
fixcore: Keep concurrent credential tests from sharing one node type registry () (c17fdee)
fixcore: Resume tool calls for deferred tools that a skill loaded () (fd2586e)
featurecore: Block create/update of workflows with deprecated nodes () (ff1a24c)
featureGoogle Gemini Node: Show Nano Banana 2.1 and 2 Lite in the image model list () (8dfc695)
fixeditor: Show the Agent artifact while the builder creates it () (e825e75)
fixAPI: Let global members grant variable scopes to API keys () (d09b8a1)
fixcore: Keep the task runner running on an unhandled promise rejection () (50f2e96)
featureeditor: Show Gateway credits promotions on community nodes () (1ea168e)
fixAPI: Let global members grant variable scopes to API keys () (cc25c71)
featureeditor: Show Gateway credits promotions on community nodes () (a509d92)
fixcore: Keep the task runner running on an unhandled promise rejection () (d719c87)
securityFixes GHSA-pcr3-v5vr-qppf: Per-User Credential Theft via Error-Workflow Execution Context Inheritance
securityFixes GHSA-3qcw-p65v-c7vq: Unauthenticated Unbounded OAuth Client Persistence via the Authorize Endpoint
securityFixes GHSA-x8wx-g24x-3549: Code Execution in the Git Node Log Operation via Unneutralized Repository Configuration
securityFixes GHSA-5jr4-xmvf-frmj: Shared Prototype Mutation Through the MCP Workflow-Validation Interpreter Allows Owner Account Takeover
securityFixes GHSA-x25p-9mr6-cwgp: Shared-Workflow Credential Check Misses Agent Node Parameter Credentials
securityFixes GHSA-29xw-66fq-4xc3: Stored XSS via Same-Origin Blob URL in the Binary-Data File Preview
securityFixes GHSA-fvv4-gmv9-xqf5: Prototype Pollution in Workflow History Compaction Causes Denial of Service
securityFixes GHSA-x5cw-hm7v-q7mj: n8n Chat Trigger Stored XSS via customCss Parameter on Hosted-Chat Page
securityFixes GHSA-728h-pmr2-7cgh: Send-and-Wait HMAC Bypass Allows Unauthenticated Approval of Waiting Executions
securityFixes GHSA-5qpp-pqww-h7fp: SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field
securityFixes GHSA-3c3p-5959-3ghr: Unauthenticated Slack Token Exfiltration and Full-Response SSRF via the Slack Trigger Webhook
securityFixes GHSA-4c7j-qff5-r9cx: Unauthenticated Cross-Project Workflow Execution via Webhook Path-Only Resolution
securityFixes GHSA-2r5r-xgvc-rj4p: Cross-Project Agent Ownership Transfer via Client-Supplied Agent ID
securityFixes GHSA-p3pg-xw4f-m72c: Cross-User Agent Chat Resume Allows Hijacking Another User's Pending Tool Approval
securityFixes GHSA-3p2g-2wpm-8h3g: Prototype Pollution in the AI Workflow Builder Connection Merge
securityFixes GHSA-cwm2-vhf5-27q9: Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance
fixAPI: Return an execution when its stored trace context is incomplete () (940f65e)
fixcore: Count a database ping as successful when its reply arrives during event-loop lag () (fe3c5bc)
fixcore: Store queue job results only for executions this process enqueued () (af4fa9b)
fixeditor: Show remaining credits on Assistant banner for Cloud UBB () (1d655e3)
featureAdd an n8n Assistant onboarding thread for new Cloud signups () (afafb02)
featureeditor: Route assistant credit CTAs to top-up for UBB accounts () (dc84b24)
fixcore: Propagate project span attributes to node spans () (29afe51)