CVE-2026-65597

n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scripting vulnerability in the HTML preview, which renders execution output into an iframe srcdoc without the sandbox attribute. A sanitizer bypass allows injected script to execute same-origin as the editor. When a victim opens the preview, the script can call authenticated APIs using the victim's session. An account with global:member privileges can exploit the issue.

• CWE-79

• https://github.com/n8n-io/n8n/security/advisories/GHSA-p3rg-hrf9-w9gjMitigation, Vendor Advisory
• https://www.vulncheck.com/advisories/n8n-before-dom-based-xss-via-unsandboxed-iframeThird Party Advisory

Published

Jul 22, 2026

Last Modified

Jul 27, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-65591n8n contains a sanitizer bypass vulnerability in the legacy …8.8
• CVE-2026-65592n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DO…5.4
• CVE-2026-65593n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a s…5.4
• CVE-2026-65594n8n before 2.29.8 and 2.30.x before 2.30.1 (affected from 2.…6.5
• CVE-2026-65595n8n before 2.30.1 and 2.29.8 assigns all Public API key scop…8.8
• CVE-2026-65596n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the…8.1
• CVE-2026-65598n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU ra…7.5
• CVE-2026-65599n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a c…6.5
• CVE-2026-6560A security vulnerability has been detected in H3C Magic B0 u…8.8
• CVE-2026-65600Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v…5.3
• CVE-2026-65601Traefik versions 3.7.0 through 3.7.6 contain a namespace con…5.3
• CVE-2026-65602Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to…8.8