CVE-2026-25049 (CVSS 9.8) Critical n8n RCE via Sandbox Escape

Back Purple-Ops

CVE-2026-25049 (CVSS 9.8) Critical n8n RCE via Sandbox Escape

Purple-Ops • February 5, 2026

Share: View original

Learn how CVE-2026-25049 enables RCE in n8n via sandbox bypass and get mitigation steps to protect your automation stack.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in n8n via Sandbox Escape (CVE-2026-25049) CVE-2026-25049, published on February 4, 2026, is a critical vulnerability in n8n that allows authenticated users to execute remote system commands through a sandbox escape. This vulnerability has a CVSS score of 9.8, indicating its severity. Users of n8n are advised to implement mitigation steps to secure their automation environments. 2 sources 68

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)