CVE-2026-118577 is a server-side request forgery (SSRF) vulnerability in maotoumao MusicFreeDesktop versions 0.0.6, 0.0.7, and 0.0.8. The flaw exists in an unknown function of the Request Forwarder component, allowing remote attackers to manipulate requests. Exploit code is publicly available, enabling potential remote exploitation. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3.
A critical vulnerability identified as CVE-2026-109618 affects the Octo Image Server component of METTLER TOLEDO products, specifically versions up to 5.0.10. The vulnerability involves a PHP2Shell issue, which could potentially allow unauthorized code execution. Although the product is typically deployed within internal networks and not exposed directly to the internet, updating the PHP package to version 8.2.35 is recommended to mitigate any potential risk and align with cybersecurity best practices.
CVE-2026-93851 is a path traversal vulnerability in Mattermost versions 11.7.0 through 11.7.10, 11.8.0 through 11.8.5, and 11.9.0 through 11.9.1. It affects the Agents plugin's mention reminder component, allowing an authenticated user with posting permissions in a channel visible to a system administrator to craft a malicious post. If the administrator clicks the forged mention reminder, it triggers an unintended API request that replaces an installed plugin and enables code execution on the server.
go-chi chi versions before 5.5.0 have an authentication bypass vulnerability in the middleware.SupressNotFound component. This flaw allows unauthenticated attackers to exploit the routing mechanism by requesting a mounted path that matches an outer public route suffix, thereby bypassing authentication middleware and potentially accessing tenant-scoped data.
Coder versions before 2.29.21, 2.30.0 before 2.34.12, 2.35.0 before 2.35.9, 2.36.0 before 2.36.7, and 2.37.0 before 2.37.4 do not validate the audience claim of Google Cloud Engine (GCE) instance-identity JWTs at a specific API endpoint. This flaw allows attackers who obtain a valid identity token intended for another relying party to replay it and gain unauthorized access to a workspace agent's session token, which remains valid until the next workspace build. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
n8n versions before 1.123.85, 2.43.5, and 2.44.1 have an authorization bypass vulnerability. This flaw allows authenticated users to access credentials they should not have permission to use by exploiting inline sub-workflow nodes with non-boolean disabled values. Attackers who know a credential ID can execute workflows in inline JSON mode, bypassing permission checks and potentially exfiltrating decrypted credentials to attacker-controlled servers.
n8n versions before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 have an OData $filter injection vulnerability in Microsoft Outlook contact lookup and Microsoft SharePoint v1 item update nodes. This flaw allows attackers to inject single quotes into expression-bindable parameters, potentially exposing the entire contact list or redirecting SharePoint writes to unintended list items within the scope of stored credentials.
n8n versions before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contain a stored cross-site scripting (XSS) vulnerability. This occurs because certain webhook response paths, including error responses and responses without headers, do not include the sandbox Content-Security-Policy header. Authenticated users with permissions to create and activate workflows can exploit this to serve malicious HTML that executes scripts in the context of the n8n origin, potentially hijacking user sessions.
A vulnerability in n8n versions before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 causes the SeaTable Trigger node's API token to be saved in error execution data. This occurs because failed poll requests store raw request headers, exposing the API token to users who can view workflow executions but do not have credential read access.
n8n versions before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 improperly store credential secrets in execution error data for certain nodes. This exposure occurs when operations fail in the Git, MongoDB Atlas Vector Store, and Google Cloud Storage nodes. Users with permission to view workflow executions but without credential read access can extract sensitive secrets such as Git passwords or tokens, MongoDB passwords, and Google access tokens from the error data.
An authorization bypass vulnerability exists in n8n versions before 1.123.85, 2.43.5, and 2.44.1 within the Chat Hub component. This flaw allows users with the global:chatUser role, who normally have limited chat-only permissions, to register restricted tool types and execute sandboxed code, access permitted files, and utilize instance workflows, Data Tables, and agents. The vulnerability has a medium severity rating with a CVSS score of 5.4.
n8n versions prior to 1.123.85, 2.43.5, and 2.44.1 contain an authorization bypass vulnerability. This flaw allows member users to access credentials they should not have permission to use by omitting default node parameters in workflows. Exploitation enables attackers to save and execute workflows that bypass pre-execution credential checks, resulting in decrypted credential values being sent to destinations controlled by the attacker.
A filter injection vulnerability exists in the Quick Base node of n8n versions before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1. This flaw allows attackers to supply untrusted input, such as webhook data, that is sent as raw query text to the Quick Base API. Exploitation can cause the 'Get Many' operation to return all records or the 'Delete' operation to remove all records accessible by the workflow credentials.
A regular expression denial of service (ReDoS) vulnerability exists in n8n versions before 1.123.85, 2.43.5, and 2.44.1. Authenticated users who can create and run workflows may exploit this by submitting specially crafted wildcard-heavy File(s) Selector patterns. This causes exponential backtracking in the regex engine, blocking the event loop and rendering the UI, API, webhooks, and health checks unresponsive until the service is restarted.
A vulnerability in n8n versions before 2.43.5 and 2.44.x before 2.44.1 allows authenticated members with workflow creation and execution permissions to exploit a client-supplied workflow ID. By using a crafted ID such as __proto__, the application improperly caches workflow owner projects, causing project checks to match all projects. This flaw enables unauthorized listing, reading, modification, and deletion of Data Table rows across all projects within the instance.
A credential guard bypass vulnerability exists in n8n versions before 1.123.85, 2.43.5, and 2.44.1. This flaw allows editors of shared workflows to exploit the Execute Sub-workflow node by loading sub-workflows from URLs or local files, thereby accessing restricted credentials and obtaining their decrypted values.
A vulnerability in chrome-devtools-mcp component of Google Chrome on Linux versions prior to 1.5.0 allows a local attacker to perform arbitrary read and write operations via a malicious file due to insufficient policy enforcement. The issue is rated with medium severity by Chromium security.
Seroval versions before 1.0.0 and from 1.5.5 up to but not including 1.6.10 improperly serialize RegExp sources containing the '<' character without escaping it. This can allow an attacker to inject script code if the RegExp is built from untrusted input and the serialized output is placed inside an HTML <script> element. The vulnerability is fixed in version 1.6.10 by changing the serialization method to use the RegExp constructor with an escaped string source.
A denial of service vulnerability exists in github.com/go-jose/go-jose/v4 where parsing deeply nested JSON structures can cause the Go runtime to hit its stack limit and crash the application. This affects versions prior to 4.1.5 and up to 3.0.5. The issue is fixed in version 4.1.5. Applications parsing untrusted JSON with affected versions are exposed to crashes.
A denial of service vulnerability exists in github.com/go-jose/go-jose/v4 when decrypting ciphertexts using the CBC-HMAC content encryption algorithms A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512. Insufficient validation of parameters can cause a panic due to indexing into an empty buffer on untrusted input. This affects versions prior to 4.1.5 and up to 3.0.5. A fix is available in version 4.1.5.