n8n security update: 5 advisories fixed in 2.47.6 and 2.48.3

n8n published five security advisories in its November 13, 2026 security update: two rated High and three Medium. The fixed versions are 2.47.6 (stable), 2.48.3 (beta), 3.2.2 (3.x) and 1.123.96 (1.x). If you self-host n8n on an older version, upgrade to the latest patch of your release line; n8n says Cloud instances are patched automatically.

Both High advisories are about accounts: one lets a member take over pending user accounts through the invitation flow, and the other lets a custom instance role with user management permissions take control of the owner account. Instances with several users are the ones to patch first.

The short version

• Upgrade to: 2.47.7 (the stable release on npm on November 14) or later, 2.48.4 (beta) or later, 3.2.2 or later (Docker), or 1.123.96 or later if you're still on 1.x. Each is at or above the fixed version n8n lists for its line.
• High: account takeover through the invitation acceptance endpoint, and owner account takeover through a custom instance role with user management permissions.
• Medium: trigger nodes using credentials the publisher can't access, AWS Bedrock nodes skipping SSRF protection for custom runtime endpoints, and integration nodes sending authenticated requests to unintended API endpoints.
• Cloud: patched automatically, no action needed.
• What we couldn't check: GitHub's advisory pages were blocked from our research environment, so this post doesn't list CVSS scores, affected version ranges or CVE IDs. The titles, severities and fixed versions come from n8n's forum post.

The five advisories

n8n's update gives one fixed version per release line for all five, rather than per advisory.

Who should hurry

The advisory titles point to who's exposed. Read the advisories themselves for the exact conditions:

• Instances with more than one user. Both High issues involve user accounts: pending invitations, and custom instance roles that include user management permissions. A single-user instance with no pending invitations and no custom roles has less at stake, but should still update.
• Teams that share workflows and credentials. The trigger-credential issue is about who can use which credential when a workflow is activated, which matters where credentials are restricted to certain people.
• Instances with SSRF protection turned on. The Bedrock advisory concerns the SSRF check being skipped for custom runtime endpoints. Our environment variables guide explains N8N_SSRF_PROTECTION_ENABLED, which is off by default.

Which version to run

On npm, n8n published the fixed versions on November 13, 2026: 1.123.96 at 08:24 UTC, 2.48.3 at 08:28 and 2.47.6 at 08:40. About an hour later it followed with 2.47.7 and 2.48.4, which are now the stable and beta tags. The 3.x line isn't on npm; Docker Hub has the 3.2.2 image from the same day.

The one change in 2.47.7, per its changelog, is a fix that stops redacting executions that use global credentials. Take 2.47.7 rather than 2.47.6.

Pin the version in Docker Compose, and give the task runner the same tag:

services:
  n8n:
    image: docker.n8n.io/n8nio/n8n:2.47.7
  task-runners:
    image: n8nio/runners:2.47.7

Back up before you upgrade. Our guide on how to update self-hosted n8n safely has the steps, and n8n stable vs beta explains which line to follow. If you're moving from 2.46, the 2.47 roundup covers what else changed.

If you can't upgrade right away

n8n's post doesn't list workarounds. Until you can patch, reduce what the titles describe:

• Review pending invitations and revoke any you don't need.
• Review custom instance roles that include user management permissions, and who holds them.
• Check who can publish workflows on instances where credentials are restricted.

These steps narrow the exposure; they don't replace the fix.

How these updates work

n8n posts a security update in its community forum about every two weeks, listing the advisories published since the last one. The previous update, on October 28, covered 12 advisories; see our post on the 2.45.5 security update. n8n also offers the updates by email from its security page.