CVE-2026-25049: n8n Expression Sandbox Escape Enables RCE

Socradar • February 5, 2026

Share: View original

CVE -2026-25049 (CVSSv4 9.4) is an expression sandbox escape in n8n that can allow authenticated users to execute system commands on the...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in n8n via Sandbox Escape (CVE-2026-25049) CVE-2026-25049, published on February 4, 2026, is a critical vulnerability in n8n that allows authenticated users to execute remote system commands through a sandbox escape. This vulnerability has a CVSS score of 9.8, indicating its severity. Users of n8n are advised to implement mitigation steps to secure their automation environments. 2 sources 68

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)