CVE-2025-61914

n8n is an open source workflow automation platform. Prior to version 1.114.0, a stored Cross-Site Scripting (XSS) vulnerability may occur in n8n when using the “Respond to Webhook” node. When this node responds with HTML content containing executable scripts, the payload may execute directly in the top-level window, rather than within the expected sandbox introduced in version 1.103.0. This behavior can enable a malicious actor with workflow creation permissions to execute arbitrary JavaScript in the context of the n8n editor interface. This issue has been patched in version 1.114.0. Workarounds for this issue involve restricting workflow creation and modification privileges to trusted users only, avoiding use of untrusted HTML responses in the “Respond to Webhook” node, and using an external reverse proxy or HTML sanitizer to filter responses that include executable scripts.

• CWE-79

• https://github.com/n8n-io/n8n/security/advisories/GHSA-58jc-rcg5-95f3Patch, Vendor Advisory

Published

Dec 26, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-61909Icinga 2 is an open source monitoring system. From 2.10.0 to…4.4
• CVE-2025-6191Integer overflow in V8 in Google Chrome prior to 137.0.7151.…8.8
• CVE-2025-61910The NASA’s Interplanetary Overlay Network (ION) is an implem…7.5
• CVE-2025-61911python-ldap is a lightweight directory access protocol (LDAP…6.5
• CVE-2025-61912python-ldap is a lightweight directory access protocol (LDAP…5.3
• CVE-2025-61913Flowise is a drag & drop user interface to build a customize…9.9
• CVE-2025-61915OpenPrinting CUPS is an open source printing system for Linu…6.7
• CVE-2025-61916Spinnaker is an open source, multi-cloud continuous delivery…6.6
• CVE-2025-61917n8n is an open source workflow automation platform. From ver…7.7
• CVE-2025-61919Rack is a modular Ruby web server interface. Prior to versio…7.5
• CVE-2025-6192Use after free in Metrics in Google Chrome prior to 137.0.71…8.8
• CVE-2025-61920Authlib is a Python library which builds OAuth and OpenID Co…7.5