CVE-2026-54302

High

Advisory

Published 16 Jun 2026In the index since 6 Sept 2026

n8n: Stored XSS in Chat Trigger Node

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 3 images.

Affected package	Affected versions	Fixed in	Images
n8nnpm	0.212.0, 1.33.1, 1.86.0	1.123.55	3

3 by stars

Chart

Latest

Affected images

Radar Score

5,639

n8none-acre-fund

1 of the 3 container images this version deploys carry CVE-2026-54302.

Container image	Digest	Package	Fixed in
n8nio/n8n :0.212.0	a9195bc499a3	n8n@0.212.0	1.123.55

7,776

n8njanip81-helm-charts

1 of the 1 container images this version deploys carry CVE-2026-54302.

Container image	Digest	Package	Fixed in
n8nio/n8n :1.86.0	8b39ed5a2de9	n8n@1.86.0	1.123.55

5,826

3 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
n8nio/n8n :1.86.0	8b39ed5a2de9	n8n@1.86.0	1.123.55	1
n8nio/n8n :0.212.0	a9195bc499a3	n8n@0.212.0	1.123.55	1
n8nio/n8n :1.33.1	dd171d45102a	n8n@1.33.1	1.123.55	1