Dashboard / CVE-2026-56356

CVE-2026-56356

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 50/100
Published: 2026-06-30 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Passive
AT: None
VC: Low
VI: Low
VA: None

Description

n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS field due to a misconfiguration of the sanitize-html library. Affected releases are those before 1.123.27, the 2.0.0 through 2.13.2 line, and 2.14.0 (fixed in 1.123.27, 2.13.3, and 2.14.1). An authenticated user with permission to create or modify workflows can inject JavaScript that bypasses sanitization, resulting in stored XSS against any user who visits the public chat page.

Weakness Classification (1)

Affected Software (8)

VendorProductVersion
n8n n8n 0 < 1.123.27
n8n n8n < 1.123.27
n8n n8n 2.14.0
n8n n8n 0 < 1.123.27
n8n n8n 2.0.0-rc.0 < 2.13.3
n8n n8n 2.14.0 < 2.14.1
n8n n8n 2.14.0 < 2.14.1
n8n n8n 2.0.0-rc.0 < 2.13.3

References & Advisories (2)

Bug Bounty Relevance

50 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

5.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

EPSS — Exploitation Probability

0.25%
Raw Score 0.002500
Percentile 16.4%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →

External Links