CVE-2026-56359

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.8.0

Description A cross-site scripting issue exists in the credential management flow. Authenticated users can inject malicious JavaScript URLs into the OAuth2 credential Authorization URL fields. This allows an attacker to craft malicious credentials and trick victims into clicking the OAuth authorization button, which executes arbitrary scripts in the victim's browser session using their privileges.

Recommendations Update n8n to version 2.8.0 or later.