CVE-2026-25049 2

Vulnerability (CVE)

Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows

n8n disclosed CVE-2026-25049, a critical workflow automation flaw rated CVSS 9.4, caused by inadequate sanitization that bypasses the fix for CVE-2025-68613, a 9.9 defect patched in December 2025. An authenticated user with permission to create or modify...

Vulnerabilities & Patching

⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More

Cyber Risks The Hacker News

OpenClaw partnered with Google's VirusTotal to scan skills uploaded to its ClawHub registry, after malicious skills were found on the public marketplace and Trend Micro reported actors on the Exploit.in forum discussing OpenClaw skill deployment for botnet...

AI Security