{"data":{"id":"961556a7-6eac-43a3-a839-d39ec5457aa4","title":"GHSA-c8xv-5998-g76h: n8n: HTTP Request Node Pagination Prototype Pollution to RCE","summary":"An authenticated user who can create or modify workflows can trigger global prototype pollution in n8n through an unvalidated pagination parameter in the HTTP Request node. Combined with other techniques, this can lead to RCE on the instance.","solution":"Fixed in n8n versions 1.123.43, 2.20.7, and 2.22.1. Upgrade to one of these versions or later. If upgrading is not immediately possible, limit workflow creation and editing permissions to fully trusted users only, and disable the HTTP Request node by adding `n8n-nodes-base.httpRequest` to the `NODES_EXCLUDE` environment variable. These workarounds do not fully remediate the risk and are short-term measures only.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-c8xv-5998-g76h","publishedAt":"2026-05-14T16:17:23.000Z","cveId":"CVE-2026-44789","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.20.7 (fixed: 2.20.7)","n8n@>= 2.21.0, < 2.22.1 (fixed: 2.22.1)","n8n@< 1.123.43 (fixed: 1.123.43)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00529,"epssCheckedAt":"2026-11-07T06:14:04.216Z","kevDateAdded":null,"advisoryAliases":["GHSA-c8xv-5998-g76h"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-14T16:17:23.000Z","fixReleasedAt":"2026-05-13T06:10:03.062Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:36:20.504Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.43","matchedVersion":"1.123.43","fixReleasedAt":"2026-05-13T06:10:03.062Z","daysToFix":-1,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:20.355Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.20.7","matchedVersion":"2.20.7","fixReleasedAt":"2026-05-13T06:15:25.821Z","daysToFix":-1,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:20.355Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.22.1","matchedVersion":"2.22.1","fixReleasedAt":"2026-05-21T10:05:54.581Z","daysToFix":7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:20.355Z"}]}}