n8n Vulnerability Detection

Automated Nuclei templates for detecting n8n vulnerabilities.

Created by @rxerium

Overview

Automated CVE detection templates for n8n Workflow Automation, with daily monitoring and template generation from GitHub Advisories, ProjectDiscovery, and NVD.

Statistics: 3 CVEs (2023) + 10 CVEs (2025) = 13 templates

Usage

# Scan a single target
nuclei -t 2025/CVE-2025-58360.yaml -u https://target.com

# Scan with all templates
nuclei -t 2023/ -t 2025/ -u https://target.com

# Scan multiple targets
nuclei -t 2025/ -l targets.txt

Requirements: Nuclei v3.0.0+

Features

• Automated Discovery - Daily monitoring of multiple CVE sources
• Intelligent Version Detection - Base64 decode n8n sentry config + version matching
• Multi-Source Intelligence - GitHub Advisories, ProjectDiscovery, NVD
• Production Ready - All templates validated before release

Detection Method

Templates extract n8n version from the sentry config meta tag at /signin, decode it, and match against vulnerable version ranges using DSL matchers.

shodan-query: http.favicon.hash:-831756631

Automation

GitHub Actions runs daily at 6 AM UTC to:

1. Fetch new CVEs from all sources
2. Generate templates with intelligent version matchers
3. Create PRs for review

See automation/README.md for details.

Responsible Use

For legitimate security testing and research only. Always obtain proper authorization before scanning.

Contact

• Twitter/X: @rxerium
• LinkedIn: rxerium
• Signal: Contact

License

MIT License - see LICENSE