# n8n patches 18

Published articles for n8n patches 18.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## n8n Patches 18 Security Vulnerabilities in Bi-Weekly Update

DevFeed: [n8n Patches 18 Security Vulnerabilities in Bi-Weekly Update](<https://devfeed.tech/articles/n8n-patches-18-security-vulnerabilities-in-bi-weekly-update-10724.md>)

Original publisher: [Read original article](<https://selfhostlab.io/n8n-september-2026-security-update/>)

Author: Christian Rakoot

Published: 2026-09-06T06:31:02Z

Content type: article

Language: en

Sources: [Self Host Lab](<https://devfeed.tech/sources/self-host-lab.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [workflow automation](<https://devfeed.tech/topics/workflow-automation.md>), [Automation](<https://devfeed.tech/topics/automation.md>), [Code](<https://devfeed.tech/topics/code.md>), [Homelab](<https://devfeed.tech/topics/homelab.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>), [Regular expression](<https://devfeed.tech/topics/regular-expression.md>), [data](<https://devfeed.tech/topics/data.md>), [Git](<https://devfeed.tech/topics/git.md>), [JSON](<https://devfeed.tech/topics/json.md>), [OpenAI](<https://devfeed.tech/topics/openai.md>)

Tags: [article](<https://devfeed.tech/tags/article.md>), [automation](<https://devfeed.tech/tags/automation.md>), [code](<https://devfeed.tech/tags/code.md>), [data](<https://devfeed.tech/tags/data.md>), [external](<https://devfeed.tech/tags/external.md>), [git](<https://devfeed.tech/tags/git.md>), [json](<https://devfeed.tech/tags/json.md>), [n8n](<https://devfeed.tech/tags/n8n.md>), [n8n-patches-18](<https://devfeed.tech/tags/n8n-patches-18.md>), [news](<https://devfeed.tech/tags/news.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [openai](<https://devfeed.tech/tags/openai.md>), [security](<https://devfeed.tech/tags/security.md>), [self-hosted](<https://devfeed.tech/tags/self-hosted.md>), [update](<https://devfeed.tech/tags/update.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [workflow](<https://devfeed.tech/tags/workflow.md>), [workflow-automation](<https://devfeed.tech/tags/workflow-automation.md>)

### AI overview

n8n's September 2, 2026 bi-weekly security update fixes 18 vulnerabilities: five high-severity and thirteen medium-severity issues. The most serious flaws are two expression-sandbox escapes that can enable arbitrary code execution on self-hosted servers. Other high-severity fixes address denial-of-service, ReDoS, and an OpenAI model-search domain-restriction bypass.

### Source excerpt

Read this article in French: n8n corrige 18 failles de sécurité dans sa mise à jour bi-hebdomadaire n8n is one of the most widely deployed self-hosted workflow automation platforms, often described as the fair-code alternative to Zapier and Make. People use it to move data between apps, trigger scripts on a schedule, and glue together [...]