CVE-2026-118648 | n8n-io n8n Webhook Response cross site scripting

October 28, 2026 Yanac

A vulnerability was found in n8n-io n8n. It has been declared as problematic. The impacted element is an unknown function of the component Webhook Response. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-118648. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More