N8N's Chat Trigger component is vulnerable to XSS

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-56265 · ADVISORY
• n8n-io/n8n#18148 · WEB
• n8n-io/n8n · PACKAGE
• n8n-io/n8n release [email protected] · WEB
• nikolas-ch/CVEs · WEB
• nikolas-ch/CVEs · Exploit
• nikolas-ch/CVEs · Exploit

n8n のその他の脆弱性

• CVE-2026-86996中 5.4n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting named This workflow can be called by wa…
• CVE-2026-86995中 4.3n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter f…
• CVE-2026-86994中 4.3n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned ever…
• CVE-2026-86993中 4.9n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference…
• CVE-2026-86085中 4.9n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assi…