# n8n 1.30.1: actively exploited

Attackers are using a vulnerability in this version right now. Upgrade immediately.

- Upgrade to: 2.41.4 (nearest fix in your release line)
- Recommended: 2.44.6 (lowest fixed release that is still supported)
- Known vulnerabilities: 204 (26 critical, 92 high, 85 medium, 1 low)
- End of life: no
- Data as of: 2026-10-24 16:52 UTC

## Vulnerabilities

| ID | Severity | Actively exploited | Fixed in |
|---|---|---|---|
| [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp) | critical | yes | 1.120.4 |
| [CVE-2026-21877](https://github.com/n8n-io/n8n/security/advisories/GHSA-v364-rw7m-3263) | critical | no | 1.121.3 |
| [CVE-2025-68668](https://github.com/n8n-io/n8n/security/advisories/GHSA-62r4-hw23-cc8v) | critical | no | 2.0.0 |
| [CVE-2026-27493](https://github.com/n8n-io/n8n/security/advisories/GHSA-75g8-rv7v-32f7) | critical | no | 1.123.22 |
| [CVE-2026-44791](https://github.com/n8n-io/n8n/security/advisories/GHSA-wrwr-h859-xh2r) | critical | no | 1.123.43 |
| [CVE-2026-44790](https://github.com/n8n-io/n8n/security/advisories/GHSA-57g9-58c2-xjg3) | critical | no | 1.123.43 |
| [CVE-2026-44789](https://github.com/n8n-io/n8n/security/advisories/GHSA-c8xv-5998-g76h) | critical | no | 1.123.43 |
| [CVE-2026-42232](https://github.com/n8n-io/n8n/security/advisories/GHSA-hqr4-h3xv-9m3r) | critical | no | 1.123.32 |
| [CVE-2026-42231](https://github.com/n8n-io/n8n/security/advisories/GHSA-q5f4-99jv-pgg5) | critical | no | 1.123.32 |
| [CVE-2026-33696](https://github.com/n8n-io/n8n/security/advisories/GHSA-mxrg-77hm-89hv) | critical | no | 1.123.27 |

And 194 more with lower severity.

## Notes

- End-of-life data isn't available for n8n; this verdict is based on known vulnerabilities only.

Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/n8n/1.30.1 · JSON: https://fixedin.dev/n8n/1.30.1.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt
