SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-77068

HIGH · CVSS 8.8 EPSS 0.58% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects n8n versions prior to 2.33.4 and 2.34.x before 2.34.1, allowing authenticated users with global:member privileges to exploit the node-schema loader in the @n8n/workflow-sdk. By leveraging path traversal techniques, an attacker can execute arbitrary code within the n8n main process, posing a significant security risk. Organizations using n8n should prioritize patching to mitigate potential remote code execution threats.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-77068
Severity
HIGH
CVSS
8.8
EPSS
0.58%

Original NVD Description

n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader derives a node's schema module path directly from the attacker-supplied node type string without validating path-traversal sequences. An authenticated user with global:member privileges can reference malicious files via path traversal, causing code execution in the n8n main process.

Related CVEs

Other vulnerabilities affecting the same vendor(s)