UpHeron
All vulnerabilities

Servers and applications

CVE-2026-119408

n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

Severity
High 8.7
Published
30 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.42.6, 2.43.3, 3.0.1
Sources
CVE Program

Affected software

SoftwareAffected versions
n8nServers and applications · cna:n8n-io|n8n
  • Every version before 2.42.6
  • From 2.43.0 before 2.43.3
  • From 3.0.0 before 3.0.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-119408