n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirect_uris but accepted arbitrarily large client_name and grant_types values. An unauthenticated remote caller could repeatedly persist oversized values in oauth_clients and exhaust database storage. The affected validation is in packages/cli/src/modules/oauth-server/oauth-server.service.ts, including MAX_CLIENT_NAME_LENGTH and MAX_GRANT_TYPES. This issue is fixed in versions 2.37.7 and 2.38.2.

The version of the n8n Node.js Package installed on the remote host is 2.0.x prior to 2.37.7, or is 2.38.x prior to 2.38.2. It is, therefore, affected by a denial of service vulnerability:

  - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client     Registration endpoint bounded redirect_uris but accepted arbitrarily large client_name and grant_types     values. An unauthenticated remote caller could repeatedly persist oversized values in oauth_clients and     exhaust database storage. The affected validation is in     packages/cli/src/modules/oauth-server/oauth-server.service.ts, including MAX_CLIENT_NAME_LENGTH and     MAX_GRANT_TYPES. This issue is fixed in versions 2.37.7 and 2.38.2. (CVE-2026-86075)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client
    Registration endpoint bounded redirect_uris but accepted arbitrarily large client_name and grant_types
    values. An unauthenticated remote caller could repeatedly persist oversized values in oauth_clients and
    exhaust database storage. The affected validation is in packages/cli/src/modules/oauth-server/oauth-
    server.service.ts, including MAX_CLIENT_NAME_LENGTH and MAX_GRANT_TYPES. This issue is fixed in versions
    2.37.7 and 2.38.2. (CVE-2026-86075)

ID	Name	Product	Family	Type	Severity
347979	n8n Node.js Package 2.0.x < 2.37.7 / 2.38.x < 2.38.2 Persistent Storage Exhaustion (CVE-2026-86075)	Nessus	Misc.	Local	high
447895	SCA: security update for n8n (GHSA-hh89-3r9w-qj3j)	Tenable Cloud Security	SCA Checks	Local	high
447895	SCA: security update for n8n (GHSA-hh89-3r9w-qj3j)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-86075

high

Tenable Plugins

high

high

high