Vulnerability Description
n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability because some webhook response paths, such as error responses and responses without headers, omit the sandbox Content-Security-Policy. Authenticated members who can create and activate workflows can serve HTML that runs on the n8n origin, letting scripts act with the session of users who open the webhook URL.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/n8n-io/n8n/security/advisories/GHSA-mp7q-23hg-35cf
- https://www.vulncheck.com/advisories/n8n-before-1.123.85-2.43.5-and-2.44.1-store
FAQ
What is CVE-2026-118648?
CVE-2026-118648 is a vulnerability with a CVSS score of 7.3 (HIGH). n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability because some webhook response paths, such as error responses and responses without...
How severe is CVE-2026-118648?
CVE-2026-118648 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-118648?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.