CVE-2026-126387
Last modified
CVE-2026-126387 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. n8n before 2.46.1 contains an arbitrary file read vulnerability that allows authenticated members to read server files by supplying absolute paths to the Browser Use browser_upload tool. Attackers with a connected remote browser session can have Playwright read files such as instance configuration from the n8n server and retrieve their contents from the page.. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
n8n before 2.46.1 contains an arbitrary file read vulnerability that allows authenticated members to read server files by supplying absolute paths to the Browser Use browser_upload tool. Attackers with a connected remote browser session can have Playwright read files such as instance configuration from the n8n server and retrieve their contents from the page.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-126387?
How severe is CVE-2026-126387?
How do I fix CVE-2026-126387?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-126381n8n before 2.43.5, 2.44.x before 2.44.1, and 3.x before 3.0.…6.3
- CVE-2026-126382n8n before 2.38.0 and 3.x before 3.0.1 contains a missing au…5.4
- CVE-2026-126383n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1…8.2
- CVE-2026-126384n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1…7.5
- CVE-2026-126385n8n before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.…7.7
- CVE-2026-126386n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1…4.7
- CVE-2026-126388n8n before 2.46.1 contains a credential exposure vulnerabili…3.7
- CVE-2026-126389n8n before 1.123.89 contains an authentication bypass vulner…5.4
- CVE-2026-126390n8n before 1.123.89 contains a credential leakage vulnerabil…3.7
- CVE-2026-126391n8n before 1.123.89 contains an insufficient isolation vulne…7.5
- CVE-2026-126392Parse Server from 9.10.6-alpha.1 before 9.10.8-alpha.1 conta…3.1
- CVE-2026-126393SiYuan before 3.8.10 contains a server-side request forgery …6.1
Are you affected by CVE-2026-126387?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST