CVE-2026-44791 n8n: XML Node Prototype Pollution Patch Bypass

Critical 9.4 Published 23 Jun 2026 Updated 23 Jun 2026

Authenticated users can bypass prototype pollution patches in the XML node to achieve remote code execution on the n8n host.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-44791?

CVE-2026-44791 is a critical code injection vulnerability in N8n N8n, published on 23 Jun 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-42232 in the XML node. When combined with other nodes, this could lead to RCE on the n8n host. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.

Weakness: CWE-1321

Which versions are affected by CVE-2026-44791?

6 open source packages ship an affected version, including n8n. It affects 1 product.

Package	Affected	Fixed in
`n8n` npm	All versions	`1.123.43`
`n8n` npm	All versions	`1.123.43`
`n8n` npm	From `2.0.0-rc.0`	`2.20.7`
`n8n` npm	From `2.0.0-rc.0`	`2.20.7`
`n8n` npm	From `2.21.0`	`2.22.1`
`n8n` npm	From `2.21.0`	`2.22.1`

Products include N8n N8n.

How do I fix CVE-2026-44791?

Upgrade n8n to a fixed version for your release line: 1.123.43, 2.20.7 or 2.22.1.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2026-44791 being exploited?

There is no known exploitation of CVE-2026-44791 in the wild and no public exploit code.

All N8n N8n vulnerabilities

Sources

Also known as GHSA-wrwr-h859-xh2r, MINI-x75w-25rw-fvmf, ROOT-APP-NPM-CVE-2026-44791.