Vulnerability (CVE)
n8n disclosed CVE-2026-21877, a maximum-severity flaw rated 10.0 on CVSS that lets an authenticated user cause untrusted code to be executed by the n8n service, potentially resulting in full compromise of the affected instance. Both self-hosted deployments...
A maximum-severity vulnerability in the n8n workflow automation platform, tracked as CVE-2026-21858 and called Ni8mare, allows unauthenticated remote code execution on locally deployed instances running versions prior to 1.121.0. The flaw arises in...
A critical vulnerability in the open-source workflow automation platform n8n, tracked as CVE-2025-68668 and rated 9.9 on CVSS, lets an authenticated user with permission to create or modify workflows execute arbitrary operating system commands on the host...
A critical flaw in Grist-Core, the open-source self-hosted relational spreadsheet-database, allows remote code execution through a malicious formula; it is tracked as CVE-2026-24002 with a CVSS score of 9.1 and codenamed Cellbreak by Cyera Research Labs....