Vulnerabilities Critical N8n Vulnerabilities Allowed Server Takeover The bugs allowed unauthenticated attackers to execute arbitrary code, steal credentials, and take over servers. Ionut ArghireMarch 12, 2026
Vulnerabilities Critical N8n Sandbox Escape Could Lead to Server Compromise The vulnerability could allow attackers to execute arbitrary commands and steal credentials and other secrets. Ionut ArghireFebruary 5, 2026
Vulnerabilities N8n Vulnerabilities Could Lead to Remote Code Execution The two bugs impacted n8n’s sandbox mechanism and could be exploited via weaknesses in the AST sanitization logic. Ionut ArghireJanuary 29, 2026
Vulnerabilities Critical Vulnerability Exposes N8n Instances to Takeover Attacks Tracked as CVE-2026-21858 (CVSS score 10), the bug enables remote code execution without authentication. Ionut ArghireJanuary 8, 2026