CVE-2026-110843 | n8n-io n8n up to 2.41.3/2.42.0 OAuth Authorization oauth.authorize query_string resource consumption

October 15, 2026 Yanac

A vulnerability marked as critical has been reported in n8n-io n8n up to 2.41.3/2.42.0. This affects the function oauth.authorize of the component OAuth Authorization. Performing a manipulation of the argument query_string results in resource consumption.

This vulnerability is reported as CVE-2026-110843. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More