Back Purple-Ops

CVE-2026-25049 (CVSS 9.3) n8n RCE Flaws Expose Automation Risks

Purple-Ops • February 6, 2026

Key Takeaways: The n8n platform is vulnerable to three critical security flaws enabling Remote Code Execution ( RCE ). CVE-2026-25049 is the most severe ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in n8n Workflow Automation Platform Disclosed Multiple critical vulnerabilities in the n8n open-source workflow automation platform were disclosed, allowing authenticated users to execute remote code on the server. These vulnerabilities, tracked as CVE-2026-25049, were reported by researchers from various cybersecurity firms and stem from issues with n8n's sanitization processes. 61 sources 57

Extracted Entities

CVE-2026-25049 (CVSS 9.3) n8n RCE Flaws Expose Automation Risks

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)