Critical n8n Vulnerability Enables System Command Execution Via Weaponized Workflows

Cybersecuritynews •Guru Baran • February 5, 2026

A critical remote code execution (RCE) vulnerability in n8n, the popular workflow automation platform. This flaw allows authenticated attackers to execute arbitrary system commands on the host server by leveraging weaponized workflows. The vulnerability represents a significant regression and expansion of the previously identified CVE-2025-68613, highlighting persistent risks in the platform’s expression evaluation engine. The […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in n8n Workflow Automation Platform Disclosed Multiple critical vulnerabilities in the n8n open-source workflow automation platform were disclosed, allowing authenticated users to execute remote code on the server. These vulnerabilities, tracked as CVE-2026-25049, were reported by researchers from various cybersecurity firms and stem from issues with n8n's sanitization processes. 61 sources 57

Extracted Entities

Critical n8n Vulnerability Enables System Command Execution Via Weaponized Workflows

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)