CVE-2026-44789
📛 CVE Title
(no title)
Description
n8n: HTTP Request Node Pagination Prototype Pollution to RCE
Description (MITRE) cveawg.mitre.org
Pulled from cveawg.mitre.org/api/cve/CVE-2026-44789 on 2026-08-01. Shown when MITRE's text differs from the cvelistV5 mirror.
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via an unvalidated pagination parameter in the HTTP Request node. Combined with other techniques this could lead to RCE on the instance. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.
Overview
- State
- —
- Assigner (CNA)
- —
- CVSS severity
- critical
- CVSS score
- 9.8 / 10
- CVSS vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- Effective score
- 9.8 / 10 CRITICAL source: CNA overview
- CWE(s)
- —
- Reserved
- —
- Published
- —
- Last updated
- —
- Source
- https://www.tenable.com/cve/CVE-2026-44789
- Linked Threat
- CVE-2026-44789 — CVE-2026-44789
NVD / KEV / EPSS data refreshed 2026-05-25 00:12 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-38483 - Assigner
- GitHub_M
- Published
- Jun 23, 2026, 3:52:45 PM
- Updated
- Jun 24, 2026, 2:02:02 PM
- EUVD base score (CVSS 4.0)
-
9.4 / 10
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - EUVD-reported EPSS
- 0.8800
- Vendors
- n8n-io
- Products
-
n8n (2.0.0-rc.0, < 2.20.7)n8n (2.21.0, < 2.21.1)n8n (< 1.123.43)
- Aliases
-
GHSA-c8xv-5998-g76h
ENISA description: n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via an unvalidated pagination parameter in the HTTP Request node. Combined with other techniques this could lead to RCE on the instance. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.
EUVD references (1)
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
MITRE references (1) cveawg.mitre.org
Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.
- https://github.com/n8n-io/n8n/security/advisories/GHSA-c8xv-5998-g76h x_refsource_CONFIRM
Web references (3)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://nvd.nist.gov/vuln/detail/CVE-2026-44789 tenable:nvd.nist.gov
- https://thehackernews.com/2026/05/ivanti-fortinet-sap-vmware-n8n-patch.html tenable:thehackernews.com
- https://www.cve.org/CVERecord?id=CVE-2026-44789 tenable:www.cve.org
Remediations (10)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:attack.mitre.org
This mitigation can be implemented through the following measures: Regular Operating System Updates Implementation: Apply the latest Windows security updates monthly using WSUS (Windows Server Update Services) or a similar patch management solution. Configure systems to check for updates automatically and schedule reboots during maintenance ...
2026-05-26 02:57 UTC -
web:blog.qualys.com
Oracle released its second quarterly edition of this year's Critical Patch Update. The update received patches for 481 security vulnerabilities.
2026-05-26 02:57 UTC -
web:community.ui.com
Published: May 21, 2026 Updated: May 22, 2026 Version: 1.1 Revision: 1.1 Summary 1 of 5 A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. Affected Products: UniFi OS Server (Version 5.0.6 and earlier) Mitigation : Update your UniFi OS Server to Version 5.0.8 or later ...
2026-05-26 02:57 UTC -
web:layerlogix.com
April 2026 Patch Tuesday drops today. Here's what's critical, what to patch first, and how Houston IT teams should handle deployment — including the Secure Boot certificate deadline reminder.
2026-05-26 02:57 UTC -
web:securityboulevard.com
Vulnerability remediation is the process of identifying, addressing, and resolving security vulnerabilities in systems, networks, or applications to eliminate potential threats. It involves fixing the root cause of the vulnerability, often through actions such as applying security patches, updating software, reconfiguring systems, or rewriting insecure code. Remediation aims to provide a ...
2026-05-26 02:57 UTC -
web:techcommunity.microsoft.com
We wanted to tell you how to address the Exchange Server May 2026 vulnerability CVE - 2026 -42897.
2026-05-26 02:57 UTC -
web:vulert.com
Learn about CVE-2026-44789 , a critical vulnerability in n8n that allows for remote code execution. Discover how to fix it and explore workarounds.
2026-05-26 02:57 UTC -
web:www.forbes.com
Updated May 17: This article, originally published May 16, has been updated to include further details on the emergency mitigation process recommended after the CVE - 2026 -42897 Microsoft Exchange ...
2026-05-26 02:57 UTC -
web:www.oracle.com
This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.
2026-05-26 02:57 UTC -
web:zecurit.com
Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .
2026-05-26 02:57 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.