n8n security advisory (AV26-176)

Serial number: AV26-176
Date: February 26, 2026

On February 25, 2026, n8n published security updates to address critical vulnerabilities in the following products:

  • n8n (Merge Node) – multiple versions
  • n8n (Expression Sandbox) – multiple versions
  • n8n (Task Runner Sandbox) – multiple versions
  • n8n (Form Node) – multiple versions
  • n8n (Form Trigger/Chat Trigger/Send & Wait/Webhook/Chat Nodes) – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary update.

Date modified: