# n8n Patches 16 Security Vulnerabilities, 12 Rated High Severity

DevFeed: [n8n Patches 16 Security Vulnerabilities, 12 Rated High Severity](<https://devfeed.tech/articles/n8n-patches-16-security-vulnerabilities-12-rated-high-severity-31457.md>)

Original publisher: [Read original article](<https://selfhostlab.io/n8n-16-security-vulnerabilities-patched/>)

Author: Christian Rakoot

Published: 2026-09-16T18:31:20Z

Content type: news

Language: en

Sources: [Self Host Lab](<https://devfeed.tech/sources/self-host-lab.md>)

Topics: [n8n](<https://devfeed.tech/topics/n8n.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [patches](<https://devfeed.tech/topics/patches.md>), [Security](<https://devfeed.tech/topics/security.md>), [Self-hosted](<https://devfeed.tech/topics/self-hosted.md>)

Tags: [automation](<https://devfeed.tech/tags/automation.md>), [n8n](<https://devfeed.tech/tags/n8n.md>), [news](<https://devfeed.tech/tags/news.md>), [patches](<https://devfeed.tech/tags/patches.md>), [security](<https://devfeed.tech/tags/security.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [self-hosted](<https://devfeed.tech/tags/self-hosted.md>), [update](<https://devfeed.tech/tags/update.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

n8n published a bi-weekly security update disclosing 16 fixed advisories: 12 rated High severity and 4 rated Medium. The article highlights an unauthenticated NoSQL injection in the MongoDB Chat Memory node that can disclose chat history across sessions, along with five High-severity credential-handling advisories.

## Source excerpt

n8n, the self-hosted workflow automation platform covered regularly on this site, published its bi-weekly security update on September 16, 2026. The bulletin, posted on the official n8n Community forum by a member of the n8n security team, discloses 16 advisories fixed since the previous update on September 2: 12 rated High severity and 4 rated [...]