CVE-2026-44791: n8n: XML Node Prototype Pollution Patch Bypass

Synopsis

Prototype pollution patch bypass in n8n, an open-source workflow automation platform, allows an authenticated user with workflow creation or modification rights to circumvent the fix for CVE-2026-42232 in the XML node. The vulnerability is reachable over the network and requires only a low-privilege account. Chaining the bypass with other n8n nodes enables remote code execution on the n8n host. HarborGuard tracks this advisory and will make a patched-image rebuild available the moment upstream publishes a fix version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the n8n service over the network; the CVSS vector specifies AV:N, meaning no local or physical access to the host is needed.

• AuthenticationRequired

  A low-privilege account with permission to create or modify workflows is sufficient; no administrative credentials are needed (PR:L).

• Victim interactionNot required

  No victim action is needed; the attacker triggers exploitation entirely through their own requests to the n8n API (UI:N).

• Attack complexityDetail

  Attack complexity is low (AC:L), meaning the exploit is reliable and requires no special race conditions or environmental pre-conditions beyond holding a valid low-privilege account.

Blast Radius

• A successful attacker executes arbitrary code on the n8n host process, gaining full control over the automation server.
• The attacker reads any data accessible to the n8n process, including stored credentials, API keys, and workflow secrets held in the n8n database.
• The attacker modifies or deletes workflows, persisted execution records, and connected data stores that n8n has write access to.
• Because both system confidentiality and system integrity CVSS tokens are rated High, compromise can extend beyond the n8n container to other services reachable from the host network.