Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-56349

n8n - Guardrail Node Bypass via Crafted Input

Description

n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malicious inputs to circumvent guardrail protections and compromise workflow integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n8n n8n

Default version status: unaffected

  • 0 to < 2.10.0affected
  • 2.10.0unaffected
pkg:npm/n8n

References