Critical n8n Security Update: Public RCE Vulnerability PoC Now Available

Back Cioinfluence

Critical n8n Security Update: Public RCE Vulnerability PoC Now Available

Cioinfluence • February 5, 2026

Share: View original

SecureLayer7 Research Labs has identified and responsibly disclosed a critical Remote Code Execution ( RCE ) vulnerability, CVE-2026-25049.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in n8n Workflow Automation Platform Disclosed Multiple critical vulnerabilities in the n8n open-source workflow automation platform were disclosed, allowing authenticated users to execute remote code on the server. These vulnerabilities, tracked as CVE-2026-25049, were reported by researchers from various cybersecurity firms and stem from issues with n8n's sanitization processes. 61 sources 57

Extracted Entities

Attack Types (1)

Zero-day Exploit

Companies (1)

SecureLayer7 Research Labs

CVEs (1)

Platforms (1)