n8n in July 2026: incidents, uptime and changes

Name: n8n status incidents and page changes, July 2026
Creator: Rewindex
License: https://creativecommons.org/licenses/by/4.0/

0incidents posted

0labelled major or critical

0price changes

0notable page changes

Incidents 0

n8n posted no incidents in July 2026.

CVE-2025-71380 n8n - Arbitrary Command Execution via Execute Command Node (CVSS 8.8)
CVE-2026-56359 n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL (CVSS 5.4)
CVE-2026-56360 n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger (CVSS 4.0)
CVE-2026-56775 n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints (CVSS 5.4)
CVE-2026-56776 n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint (CVSS 7.4)
CVE-2026-56778 n8n - Authorization Bypass in Public API Execution Retry Endpoint (CVSS 6.4)
CVE-2026-59253 n8n - Improper Authorization in Workflow Assignment to Folders (CVSS 5.0)
CVE-2026-59257 n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation (CVSS 8.8)
CVE-2026-56354 n8n - Cross-Site Scripting and Open Redirect in Form Node (CVSS 4.1)
CVE-2026-58661 n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint (CVSS 4.3)
CVE-2026-56349 n8n - Guardrail Node Bypass via Crafted Input (CVSS 6.3)
CVE-2026-56352 n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter (CVSS 6.4)
CVE-2026-56353 n8n - Authentication Bypass in Chat Trigger Node (CVSS 4.8)
CVE-2026-59254 n8n - External Secrets Disclosure via Workflow Node Expressions (CVSS 6.3)
CVE-2026-59259 n8n - Permission Bypass via Expression Parser Mismatch in External Secrets (CVSS 6.5)

n8n posted 0 status incidents in July 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.