Labs
Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.
- highCVE-2026-56817
CVE-2026-56817: netty-codec-xml XmlDecoder XML External Entity Injection
Netty's XmlDecoder uses an unconfigured XML parser that leaves DTD and external entity processing enabled by default, letting any attacker who can send bytes into the pipeline attempt to read server…
- highCVE-2026-56820
CVE-2026-56820: Netty OcspClient OCSP Response Replay Attack
Netty's OCSP client never checks whether the certificate ID in an OCSP response actually matches the certificate being validated, so an attacker can replay a legitimate GOOD response for any other…
- highCVE-2026-56821
CVE-2026-56821: netty-handler-ssl-ocsp Stale OCSP Response Accepted as Valid
A missing return statement in Netty's OCSP certificate validator lets an on-path attacker replay an expired OCSP GOOD response to make a revoked server certificate appear valid.
- highCVE-2026-55831
CVE-2026-55831: netty-codec-http SPDY SETTINGS Frame Unbounded Entry Count DoS
A remote attacker can crash or stall a Netty server that speaks SPDY/3.1 by sending a single oversized SETTINGS frame that forces the server to allocate hundreds of thousands of map entries…
- highCVE-2026-55833
CVE-2026-55833: netty-codec-http SPDY zlib Decompression Bomb (DoS)
Netty keeps inflating a zlib-compressed SPDY header block even after the header-size limit fires, so an attacker can send roughly 12 KB on the wire and force the server to decompress 12 MB of header…
- high
CVE-2026-65015: n8n AI Agent Project Viewer Privilege Escalation via run_node_tool
A read-only Project Viewer in n8n can chat with an AI Agent to silently execute any workflow node and read credential secrets, bypassing the role boundary entirely.
- high
CVE-2026-65597: n8n DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview
A missing sandbox attribute on the HTML preview iframe in n8n lets an attacker inject a script that runs with full editor-origin privileges and can silently call authenticated APIs using the victim's…
- high
CVE-2026-65598: n8n Git Clone Node TOCTOU Race Condition RCE
A race condition in n8n's Git clone node lets an authenticated attacker swap a validated directory for a symlink in the brief window before the clone runs, planting a malicious custom node that…
- highCVE-2026-65015
CVE-2026-65015: n8n AI Agent Project Viewer Privilege Escalation via run_node_tool
A read-only Project Viewer in n8n can chat with an AI agent to silently execute arbitrary tool nodes and access credential secrets they are not permitted to see, bypassing role-based access controls…
- highCVE-2026-65598
CVE-2026-65598: n8n Git Clone Node TOCTOU Race Condition RCE
An authenticated n8n user can race the Git node's path check to swap a validated directory for a symlink, planting a crafted repository in the community node folder and achieving remote code…
- highCVE-2026-65597
CVE-2026-65597: n8n DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview
A missing sandbox attribute on the n8n editor's HTML preview iframe lets a low-privileged user inject scripts that run with the same origin as the editor, giving them access to any victim's…
- highCVE-2026-65592
CVE-2026-65592: n8n Stored DOM XSS via Resource Locator cachedResultUrl
An authenticated n8n user can craft a workflow that runs arbitrary JavaScript in a victim's browser by storing a javascript: URL in the cachedResultUrl field of a Resource Locator parameter.