n8n 2.40.7 → 2.44.7
19 releases · 0 breaking changes · 27 security fixes · 27 advisories fixed
27security0breaking0deprecated8feature27fix
Vulnerabilities fixed by this upgrade
- 5.3 GHSA-mgpr-56r4-5c67 OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes
- 5.1 GHSA-8vrr-mgc5-jg55 Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value
- 5.3 GHSA-crfj-5wv6-8v86 SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data
- 5.1 GHSA-8crx-5h96-q72q Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard
- 5.1 GHSA-v9cx-v88r-42vw Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted
- 5.1 GHSA-pcr3-v5vr-qppf Per-User Credential Theft via Error-Workflow Execution Context Inheritance
- 5.9 GHSA-cwm2-vhf5-27q9 Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance
- 6.3 GHSA-3c3p-5959-3ghr Unauthenticated Slack Token Exfiltration and Full-Response SSRF via the Slack Trigger Webhook
- 5.3 GHSA-43v8-hjhm-chjp Chat Hub: chat-only users can register tool types the product already tries to sandbox
- 5.3 GHSA-65mv-v8rp-54wc Quick Base Node Allows Filter Injection Through the Where Parameter
- 5.3 GHSA-qmvv-q3c9-wpp7 Credential Secrets Exposed in Execution Error Data of Several Nodes
- 7.1 GHSA-m7gv-mpg5-7c9v Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block
- 7.2 GHSA-wvjj-qg37-pv73 Crafted Workflow ID Gives Access to Data Tables in Other Projects
- 8.4 GHSA-mp7q-23hg-35cf Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting
- 7.1 GHSA-fvv4-gmv9-xqf5 Prototype Pollution in Workflow History Compaction Causes Denial of Service
- 6.1 GHSA-2r5r-xgvc-rj4p Cross-Project Agent Ownership Transfer via Client-Supplied Agent ID
- 6.0 GHSA-3p2g-2wpm-8h3g Prototype Pollution in the AI Workflow Builder Connection Merge
- 6.3 GHSA-4c7j-qff5-r9cx Unauthenticated Cross-Project Workflow Execution via Webhook Path-Only Resolution
- 6.1 GHSA-p3pg-xw4f-m72c Cross-User Agent Chat Resume Allows Hijacking Another User's Pending Tool Approval
- 7.0 GHSA-x5cw-hm7v-q7mj n8n Chat Trigger Stored XSS via customCss Parameter on Hosted-Chat Page
- 7.7 GHSA-x8wx-g24x-3549 Code Execution in the Git Node Log Operation via Unneutralized Repository Configuration
- 7.7 GHSA-5jr4-xmvf-frmj Shared Prototype Mutation Through the MCP Workflow-Validation Interpreter Allows Owner Account Takeover
- 7.0 GHSA-728h-pmr2-7cgh Send-and-Wait HMAC Bypass Allows Unauthenticated Approval of Waiting Executions
- 7.2 GHSA-x25p-9mr6-cwgp Shared-Workflow Credential Check Misses Agent Node Parameter Credentials
- 7.0 GHSA-5qpp-pqww-h7fp SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field
- 7.2 GHSA-29xw-66fq-4xc3 Stored XSS via Same-Origin Blob URL in the Binary-Data File Preview
- 8.2 GHSA-3qcw-p65v-c7vq Unauthenticated Unbounded OAuth Client Persistence via the Authorize Endpoint
Breaking changes
None in the release notes.
Security changes
- security Fixes GHSA-mp7q-23hg-35cf: Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting in 2.43.5
- security Fixes GHSA-wvjj-qg37-pv73: Crafted Workflow ID Gives Access to Data Tables in Other Projects in 2.43.5
- security Fixes GHSA-m7gv-mpg5-7c9v: Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block in 2.43.5
- security Fixes GHSA-mgpr-56r4-5c67: OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes in 2.43.5
- security Fixes GHSA-crfj-5wv6-8v86: SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data in 2.43.5
- security Fixes GHSA-43v8-hjhm-chjp: Chat Hub: chat-only users can register tool types the product already tries to sandbox in 2.43.5
- security Fixes GHSA-65mv-v8rp-54wc: Quick Base Node Allows Filter Injection Through the Where Parameter in 2.43.5
- security Fixes GHSA-qmvv-q3c9-wpp7: Credential Secrets Exposed in Execution Error Data of Several Nodes in 2.43.5
- security Fixes GHSA-8vrr-mgc5-jg55: Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value in 2.43.5
- security Fixes GHSA-8crx-5h96-q72q: Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard in 2.43.5
- security Fixes GHSA-v9cx-v88r-42vw: Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted in 2.43.5
- security Fixes GHSA-pcr3-v5vr-qppf: Per-User Credential Theft via Error-Workflow Execution Context Inheritance in 2.41.5
- security Fixes GHSA-3qcw-p65v-c7vq: Unauthenticated Unbounded OAuth Client Persistence via the Authorize Endpoint in 2.41.4
- security Fixes GHSA-x8wx-g24x-3549: Code Execution in the Git Node Log Operation via Unneutralized Repository Configuration in 2.41.4
- security Fixes GHSA-5jr4-xmvf-frmj: Shared Prototype Mutation Through the MCP Workflow-Validation Interpreter Allows Owner Account Takeover in 2.41.4
- security Fixes GHSA-x25p-9mr6-cwgp: Shared-Workflow Credential Check Misses Agent Node Parameter Credentials in 2.41.4
- security Fixes GHSA-29xw-66fq-4xc3: Stored XSS via Same-Origin Blob URL in the Binary-Data File Preview in 2.41.4
- security Fixes GHSA-fvv4-gmv9-xqf5: Prototype Pollution in Workflow History Compaction Causes Denial of Service in 2.41.4
- security Fixes GHSA-x5cw-hm7v-q7mj: n8n Chat Trigger Stored XSS via customCss Parameter on Hosted-Chat Page in 2.41.4
- security Fixes GHSA-728h-pmr2-7cgh: Send-and-Wait HMAC Bypass Allows Unauthenticated Approval of Waiting Executions in 2.41.4
- security Fixes GHSA-5qpp-pqww-h7fp: SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field in 2.41.4
- security Fixes GHSA-3c3p-5959-3ghr: Unauthenticated Slack Token Exfiltration and Full-Response SSRF via the Slack Trigger Webhook in 2.41.4
- security Fixes GHSA-4c7j-qff5-r9cx: Unauthenticated Cross-Project Workflow Execution via Webhook Path-Only Resolution in 2.41.4
- security Fixes GHSA-2r5r-xgvc-rj4p: Cross-Project Agent Ownership Transfer via Client-Supplied Agent ID in 2.41.4
- security Fixes GHSA-p3pg-xw4f-m72c: Cross-User Agent Chat Resume Allows Hijacking Another User's Pending Tool Approval in 2.41.4
- security Fixes GHSA-3p2g-2wpm-8h3g: Prototype Pollution in the AI Workflow Builder Connection Merge in 2.41.4
- security Fixes GHSA-cwm2-vhf5-27q9: Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance in 2.41.4
Every release in between
fixcore: Start sub-workflow error workflow when a pre-run check fails () (67d0e65)
fixEmail Trigger (IMAP) Node: Back off reconnects when the server drops each new connection () (10a9518)
fixMicrosoft SharePoint Node: Fix the column mapper 403 and empty items in Map Automatically () (e67d278)
fixUpdate certifi to 2026.10.19 in task runner () (2858cfb)
fixUpdate certifi to 2026.10.23 in task runner () (6187237)
fixPostgres Node: Prevent global pgtypes overwrite () (654315e)
fixcore: Key queue job outcomes by job on shutdown resume () (1f074d4)
fixeditor: Load credential types on startup () (6ff3198)
fixcore: Reuse connections in the log streaming webhook destination () (b79afe2)
fixcore: Turn off expression spans by default () (6965193)
fixcore: Turn off expression spans by default () (e88162a)
featurecore: Suspend in-flight production executions at worker shutdown () (5863179)
fixcore: Create an XML parser for each webhook request body () (ea3ee53)
securityFixes GHSA-mp7q-23hg-35cf: Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting
securityFixes GHSA-wvjj-qg37-pv73: Crafted Workflow ID Gives Access to Data Tables in Other Projects
securityFixes GHSA-m7gv-mpg5-7c9v: Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block
securityFixes GHSA-mgpr-56r4-5c67: OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes
securityFixes GHSA-crfj-5wv6-8v86: SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data
securityFixes GHSA-43v8-hjhm-chjp: Chat Hub: chat-only users can register tool types the product already tries to sandbox
securityFixes GHSA-65mv-v8rp-54wc: Quick Base Node Allows Filter Injection Through the Where Parameter
securityFixes GHSA-qmvv-q3c9-wpp7: Credential Secrets Exposed in Execution Error Data of Several Nodes
securityFixes GHSA-8vrr-mgc5-jg55: Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value
securityFixes GHSA-8crx-5h96-q72q: Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard
securityFixes GHSA-v9cx-v88r-42vw: Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted
fixcore: Validate the size argument of the chunk() expression extension () (4bf0ece)
featureShow Gemini models by name and list prioritized models first in model pickers () (66cece2)
fixcore: Handle each Chat Hub segment once in queue mode () (dc77062)
fixcore: Resume tool calls for deferred tools that a skill loaded () (ea448c6)
fixcore: Keep concurrent credential tests from sharing one node type registry () (c17fdee)
fixcore: Resume tool calls for deferred tools that a skill loaded () (fd2586e)
featurecore: Block create/update of workflows with deprecated nodes () (ff1a24c)
featureGoogle Gemini Node: Show Nano Banana 2.1 and 2 Lite in the image model list () (8dfc695)
fixeditor: Show the Agent artifact while the builder creates it () (e825e75)
fixAPI: Let global members grant variable scopes to API keys () (d09b8a1)
fixcore: Keep the task runner running on an unhandled promise rejection () (50f2e96)
featureeditor: Show Gateway credits promotions on community nodes () (1ea168e)
fixAPI: Let global members grant variable scopes to API keys () (cc25c71)
featureeditor: Show Gateway credits promotions on community nodes () (a509d92)
fixcore: Keep the task runner running on an unhandled promise rejection () (d719c87)
securityFixes GHSA-pcr3-v5vr-qppf: Per-User Credential Theft via Error-Workflow Execution Context Inheritance
securityFixes GHSA-3qcw-p65v-c7vq: Unauthenticated Unbounded OAuth Client Persistence via the Authorize Endpoint
securityFixes GHSA-x8wx-g24x-3549: Code Execution in the Git Node Log Operation via Unneutralized Repository Configuration
securityFixes GHSA-5jr4-xmvf-frmj: Shared Prototype Mutation Through the MCP Workflow-Validation Interpreter Allows Owner Account Takeover
securityFixes GHSA-x25p-9mr6-cwgp: Shared-Workflow Credential Check Misses Agent Node Parameter Credentials
securityFixes GHSA-29xw-66fq-4xc3: Stored XSS via Same-Origin Blob URL in the Binary-Data File Preview
securityFixes GHSA-fvv4-gmv9-xqf5: Prototype Pollution in Workflow History Compaction Causes Denial of Service
securityFixes GHSA-x5cw-hm7v-q7mj: n8n Chat Trigger Stored XSS via customCss Parameter on Hosted-Chat Page
securityFixes GHSA-728h-pmr2-7cgh: Send-and-Wait HMAC Bypass Allows Unauthenticated Approval of Waiting Executions
securityFixes GHSA-5qpp-pqww-h7fp: SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field
securityFixes GHSA-3c3p-5959-3ghr: Unauthenticated Slack Token Exfiltration and Full-Response SSRF via the Slack Trigger Webhook
securityFixes GHSA-4c7j-qff5-r9cx: Unauthenticated Cross-Project Workflow Execution via Webhook Path-Only Resolution
securityFixes GHSA-2r5r-xgvc-rj4p: Cross-Project Agent Ownership Transfer via Client-Supplied Agent ID
securityFixes GHSA-p3pg-xw4f-m72c: Cross-User Agent Chat Resume Allows Hijacking Another User's Pending Tool Approval
securityFixes GHSA-3p2g-2wpm-8h3g: Prototype Pollution in the AI Workflow Builder Connection Merge
securityFixes GHSA-cwm2-vhf5-27q9: Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance
fixAPI: Return an execution when its stored trace context is incomplete () (940f65e)
fixcore: Count a database ping as successful when its reply arrives during event-loop lag () (fe3c5bc)
fixcore: Store queue job results only for executions this process enqueued () (af4fa9b)
fixeditor: Show remaining credits on Assistant banner for Cloud UBB () (1d655e3)
featureAdd an n8n Assistant onboarding thread for new Cloud signups () (afafb02)
featureeditor: Route assistant credit CTAs to top-up for UBB accounts () (dc84b24)
fixcore: Propagate project span attributes to node spans () (29afe51)