A previously published patch left a gaping hole that crooks will happily exploit.
Patch meant to close a severe expression bug fails to stop attackers with workflow access Multiple newly disclosed bugs in the popular workflow automation tool n8n could allow attackers to hijack ...
Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.
A critical n8n flaw could allow attackers to use crafted expressions in workflows to execute arbitrary commands on the host.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results