Prototype Pollution Vulnerability in n8n AI Workflow Builder

CVE-2026-110848

What is CVE-2026-110848?

n8n versions prior to 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 are susceptible to a prototype pollution vulnerability in their AI workflow builder. This issue arises from the merging of workflow connections that utilize node names as object members without adequately validating reserved keys. Authenticated users can exploit this flaw by creating nodes named proto through the API, thereby executing the connect-nodes operation, which pollutes the global object prototype. This manipulation can lead to severe disruptions in the n8n instance until it is restarted.

References