Uncontrolled Resource Consumption in n8n OAuth Authorize Endpoint

CVE-2026-110843

What is CVE-2026-110843?

n8n prior to version 2.41.4 and 2.42.1 is vulnerable to an uncontrolled resource consumption issue within its unauthenticated OAuth authorize endpoint. This vulnerability allows attackers to exploit URL paths by sending identifiers with differing query strings. Such actions can result in the creation of unlimited first-party client records, bypassing intended registration limits. As a result, the database may grow uncontrollably, potentially filling available disk space and leading to service disruption.

References