CVE-2026-118678 | n8n-io n8n up to 2.41.3/2.42.0 prototype pollution

October 28, 2026 Yanac

A vulnerability was found in n8n-io n8n up to 2.41.3/2.42.0. It has been classified as critical. The affected element is an unknown function. Performing a manipulation results in improperly controlled modification of object prototype attributes.

This vulnerability is identified as CVE-2026-118678. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More