CVE-2026-103251 | n8n-io n8n up to 1.123.79/2.39.5/2.40.0 Community Package Installation permission

A vulnerability labeled as critical has been found in n8n-io n8n up to 1.123.79/2.39.5/2.40.0. This affects an unknown part of the component Community Package Installation Handler. The manipulation results in permission issues.

This vulnerability is known as CVE-2026-103251. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More