CVE-2026-25053 (CVSS 9.4) and Related Flaws Trigger RCE on n8n

Back Purple-Ops

CVE-2026-25053 (CVSS 9.4) and Related Flaws Trigger RCE on n8n

Purple-Ops • February 6, 2026

Share: View original

CVE-2026-25053 ( CVSS 9.4), CVE-2026-25056, and CVE-2026-25049 ( CVSS 9.3): Popular n8n Platform Hit by Triple Threat of RCE Flaws. Estimated reading ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in n8n Workflow Automation Platform Disclosed Multiple critical vulnerabilities in the n8n open-source workflow automation platform were disclosed, allowing authenticated users to execute remote code on the server. These vulnerabilities, tracked as CVE-2026-25049, were reported by researchers from various cybersecurity firms and stem from issues with n8n's sanitization processes. 61 sources 57

Extracted Entities

Attack Types (1)

Remote Code Execution

CVEs (3)

CVE-2026-25049 CVE-2026-25053 CVE-2026-25056

Platforms (1)