CVE-2026-33749 | n8n-io n8n up to 1.123.26/2.13.2/2.14.0 Content-Security-Policy /rest/binary-data cross site scripting

March 25, 2026 Yanac

A vulnerability has been found in n8n-io n8n up to 1.123.26/2.13.2/2.14.0 and classified as problematic. This vulnerability affects unknown code of the file /rest/binary-data of the component Content-Security-Policy Handler. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2026-33749. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More