N8n N8n 外部资源引用不当漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-169-10739-e7e58-1.html
• https://github.com/n8n-io/n8n/security/advisories/GHSA-x2mw-7j39-93xq
• https://avd.aliyun.com/detail?id=AVD-2026-33722
• https://cloud.tencent.com/developer/article/2622530
• https://www.ithome.com.tw/news/174450
• https://github.com/n8n-io/n8n/security/advisories/GHSA-v4pr-fm98-w9pg
• https://nvd.nist.gov/vuln/detail/CVE-2026-33722
• https://cloud.tencent.com/developer/article/2627561

Related Vulnerabilities

• N8n N8n 需授权 命令注入漏洞
• N8n N8n 需授权 表达式注入漏洞
• PoCCVE-2026-21877: n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution
• N8n N8n 需授权 代码注入漏洞
• PoCCVE-2026-21858: n8n Webhooks - Remote Code Execution
• PoCCVE-2025-68613: n8n - Remote Code Execution via Expression Injection
• N8n N8n 设计缺陷漏洞 可导致沙箱逃逸
• N8n 需授权 外部资源引用不当漏洞 可导致代码执行
• PoCn8n-config: N8n - Config