https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:32:18.955689+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-77068 CVE-2026-77068 — n8n before 2.34.1 Remote Code Execution via Path Traversal 2026-09-28T07:32:18.958625+00:00

Affected: n8n-io n8n

n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader derives a node's schema module path directly from the attacker-supplied node type string without validating path-traversal sequences. An authenticated user with global:member privileges can reference malicious files via path traversal, causing code execution in the n8n main process.