Multiple critical vulnerabilities in the popular n8n open-source workflow automation platform allow escaping the confines of the environment and taking complete control of the host server.

New flaw in n8n (CVE-2026-25049) allows unauthenticated users to run arbitrary commands on servers Vulnerability risks theft of secrets (API keys, OAuth tokens) and cross-tenant data exposure Patch ...

Six more vulnerabilities have been discovered in the n8n workflow platform used for building LLM-powered agents to connect business processes. Four of the six are rated as critical, carrying CVSS ...

On Thursday night, ten new vulnerability entries were published for the open-source workflow automation tool n8n. These address six vulnerabilities classified as critical risks, with the remaining ...

Pillar Security discovers two critical vulnerabilities (CVSS 10.0) in popular workflow automation platform affecting hundreds of thousands of deployments – enabling attackers to decrypt stored ...