| Package | Affected versions | Patched versions |
|---|---|---|
| n8n | < 2.10.0 | 2.10.0 |
An end user interacting with a workflow that uses the Guardrail node could craft an input that bypasses the default guardrail instructions.
The issue has been fixed in n8n version 2.10.0. Users should upgrade to this version or later to remediate the vulnerability.
If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free