n8n security advisory (AV26-1160)

Reported by Canadian Centre for Cyber Security

Summary by Cyber Security News13 Nov 2026, 15:28 CET

About this summary. This is a short excerpt from the description that Canadian Centre for Cyber Security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://cyber.gc.ca/en/alerts-advisories/n8n-security-advisory-av26-1160

Serial number: AV26-1160 Date: November 13, 2026 As of November 13, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 2.45.5 Prior to 2.46.1 Prior to 3.0.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. OAuth Account Hijack in the End-User Credential Connect Flow via Unauthenticated Callback Overview · n8n-io/n8n · GitHub

Read the full article at Canadian Centre for Cyber Security →

Source attribution: headline and facts are from Canadian Centre for Cyber Security (cyber.gc.ca). Summary method: excerpt of the source description. See our source attribution policy.