Who Patches Your Automation Tool? n8n Just Issued Fixes
On October 14, n8n published its latest security update. It lists several flaws in self-hosted installs, and five carry a High rating. Fixed versions are 1.123.85 for the 1.x line and 2.43.5 for the current stable line.
n8n Cloud customers need to do nothing, because n8n patches those instances automatically. If you self-host, you must update yourself. One report says there is no known exploitation, but administrators should still patch promptly.
Why this matters beyond n8n
Automation tools hold the keys to your other systems. They also store API keys, email logins, and CRM access. Several of these advisories involve exposed credentials or data access across projects, so the risk goes beyond the tool itself.
This is the same lesson as in WordPress plugin security: software you run yourself needs someone who owns the updates. For the wider shift in these platforms, see how automation platforms are becoming business operating systems.
Who owns patching?
- Ask who hosts your automation tools: the vendor, your team, or an agency.
- If it is self-hosted, find the version number and compare it with the vendor's latest security update.
- Apply updates within days of a security notice, because delays leave known holes open.
- Keep a backup before updating, and test one workflow afterward.
- Limit who can create workflows, because several flaws affect multi-user setups.
- Consider the cloud version if nobody has time to patch.
The vendor patches cloud tools such as Zapier and Make, which removes this task. However, self-hosting trades that convenience for control and flexibility.
FAQ
Does this affect Zapier or Make?
This bulletin covers n8n only. Zapier and Make are hosted services, so the vendor handles patching.
How do I find my n8n version?
Open your n8n instance and check the version shown in the interface. Then compare it with the fixed versions above.
Related: MCP and AI agents: seven limits to set before you connect.
Related: patching priorities for a small business.
Getting started
We build and maintain automation for small businesses, including patching and monitoring. Book a Free Call, and we will check who owns the updates on yours.