{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting oder Server-Side Request Forgery durchzuführen oder einen Denial-of-Service-Zustand herbeizuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-2681 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2681.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-2681 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2681"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-233r-fpgw-fx8x vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-233r-fpgw-fx8x"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-5f26-397h-v6v9 vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-5f26-397h-v6v9"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-6h4x-896x-fw5m vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-6h4x-896x-fw5m"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-953p-jm2c-8h5j vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-953p-jm2c-8h5j"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-9fqj-7wc5-cwhx vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-9fqj-7wc5-cwhx"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-9rp2-wm75-c5fj vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-9rp2-wm75-c5fj"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-c4f6-59xq-95ww vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-c4f6-59xq-95ww"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-c9c6-rq46-h25v vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-c9c6-rq46-h25v"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-f4f3-2g67-4vhm vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-f4f3-2g67-4vhm"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-fh4c-9rr2-p7qc vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-fh4c-9rr2-p7qc"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-m3hg-p5r9-fg9h vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-m3hg-p5r9-fg9h"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-m87g-qr43-ccvc vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-m87g-qr43-ccvc"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-q3fv-295f-qfpf vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-q3fv-295f-qfpf"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-r4j2-j3wm-q689 vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-r4j2-j3wm-q689"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-rmr5-775f-jvm2 vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-rmr5-775f-jvm2"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-vfrj-582q-mvcp vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-vfrj-582q-mvcp"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-wcv8-x773-j96r vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-wcv8-x773-j96r"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-xhmh-8fgr-xqhj vom 2026-08-05",
      "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-xhmh-8fgr-xqhj"
    } ],
    "source_lang" : "en-US",
    "title" : "n8n: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-08-20T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-08-21T07:51:48.892+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-2681",
      "initial_release_date" : "2026-08-05T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-08-05T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-08-20T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Referenz(en) aufgenommen: CVE-2026-77081, EUVD-2026-63269, GHSA-JRHF-3PW6-QQWV, CVE-2026-77080, EUVD-2026-63268, GHSA-F4H2-4C4X-G885, CVE-2026-77068, EUVD-2026-63257, CVE-2026-77070, EUVD-2026-63259, CVE-2026-77071, EUVD-2026-63260, CVE-2026-77075, EUVD-2026-63264, GHSA-VP98-5689-MC9F, CVE-2026-77074, GHSA-H3RW-RG69-FPPW, CVE-2026-77085, GHSA-GVF5-4G66-F766, GHSA-4X9Q-XQFH-JH4J, EUVD-2026-63263, CVE-2026-77073, EUVD-2026-63262, CVE-2026-77079, EUVD-2026-63267, GHSA-49Q9-J3MM-WGH5, CVE-2026-77084, EUVD-2026-63272, GHSA-FV4X-PGRR-XH57, CVE-2026-77083, EUVD-2026-63271, GHSA-2664-HR5V-554W, CVE-2026-77082, EUVD-2026-63270, GHSA-JXF5-F3HG-VXVJ, CVE-2026-77076, EUVD-2026-63265, GHSA-8329-W544-9MX3, CVE-2026-77069, EUVD-2026-63258, CVE-2026-77072, EUVD-2026-63261, CVE-2026-77077, EUVD-2026-63266, GHSA-25G8-CWM4-WQR3"
      } ],
      "status" : "final",
      "version" : "2"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<1.123.69",
          "product" : {
            "name" : "n8n n8n <1.123.69",
            "product_id" : "T057676"
          }
        }, {
          "category" : "product_version",
          "name" : "1.123.69",
          "product" : {
            "name" : "n8n n8n 1.123.69",
            "product_id" : "T057676-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:n8n:n8n:1.123.69"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2.34.1",
          "product" : {
            "name" : "n8n n8n <2.34.1",
            "product_id" : "T057677"
          }
        }, {
          "category" : "product_version",
          "name" : "2.34.1",
          "product" : {
            "name" : "n8n n8n 2.34.1",
            "product_id" : "T057677-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:n8n:n8n:2.34.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2.33.4",
          "product" : {
            "name" : "n8n n8n <2.33.4",
            "product_id" : "T057678"
          }
        }, {
          "category" : "product_version",
          "name" : "2.33.4",
          "product" : {
            "name" : "n8n n8n 2.33.4",
            "product_id" : "T057678-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:n8n:n8n:2.33.4"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "n8n"
      } ],
      "category" : "vendor",
      "name" : "n8n"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-77068",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77068"
  }, {
    "cve" : "CVE-2026-77069",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77069"
  }, {
    "cve" : "CVE-2026-77070",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77070"
  }, {
    "cve" : "CVE-2026-77071",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77071"
  }, {
    "cve" : "CVE-2026-77072",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77072"
  }, {
    "cve" : "CVE-2026-77073",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77073"
  }, {
    "cve" : "CVE-2026-77074",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77074"
  }, {
    "cve" : "CVE-2026-77075",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77075"
  }, {
    "cve" : "CVE-2026-77076",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77076"
  }, {
    "cve" : "CVE-2026-77077",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77077"
  }, {
    "cve" : "CVE-2026-77079",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77079"
  }, {
    "cve" : "CVE-2026-77080",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77080"
  }, {
    "cve" : "CVE-2026-77081",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77081"
  }, {
    "cve" : "CVE-2026-77082",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77082"
  }, {
    "cve" : "CVE-2026-77083",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77083"
  }, {
    "cve" : "CVE-2026-77084",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77084"
  }, {
    "cve" : "CVE-2026-77085",
    "product_status" : {
      "known_affected" : [ "T057677", "T057678", "T057676" ]
    },
    "release_date" : "2026-08-05T22:00:00.000+00:00",
    "title" : "CVE-2026-77085"
  } ]
}