CVE-2026-118648 - n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy
CVE ID :CVE-2026-118648 Published : Oct. 28, 2026, 7:17 p.m. | 1 hour, 7 minutes ago Description :n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability because some webhook response paths, such as error responses and responses...