n8n's latest critical flaws bypass December fix
Patches fix CVE-2026-25049 vulnerabilities allowing authenticated users to execute system commands and access sensitive credentials in n8n workflows, rated 9.4 CVSS severity.
8 Articles
8 Articles
n8n confirmed the presence of "additional faults" in a vulnerability which, however, had already been fixed at the end of 2025. One more episode in the series of cyber incidents that affect the open-source automation platform. The first layer of patch will not have been enough. This Wednesday 4
Critical N8n Sandbox Escape Could Lead to Server Compromise
A critical sandbox escape vulnerability in the n8n AI workflow automation platform could allow attackers to execute arbitrary commands on the server, Pillar Security reports. Tracked as CVE-2026-25049 (CVSS score of 9.4), the issue impacts the manner in which the n8n sandbox’s sanitization routine evaluates JavaScript expressions. Pillar discovered that the sandbox’s sanitizer could be […] The post Critical N8n Sandbox Escape Could Lead to Serve…
Critical N8n Vulnerability CVE-2026-25049 Enables RCE
A newly disclosed critical vulnerability, tracked as CVE-2026-25049, in the workflow automation platform n8n, allows authenticated users to execute arbitrary system commands on the underlying server by exploiting weaknesses in the platform’s expression evaluation mechanism. With a CVSS score of 9.4, the issue is classified as critical and poses a high risk to affected systems. The CVE-2026-25049 vulnerability is the result of insufficient inpu…
In the n8n automation tool, the developers have plugged further vulnerabilities. An update to the latest version is recommended.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
