Ni8mare Vulnerability Let Attackers Hijack n8n Servers – Exploit Released and 26,512 Hosts Vulnerable

Cybersecuritynews •Guru Baran • January 8, 2026

A critical unauthenticated remote code execution vulnerability discovered in n8n, the popular workflow automation platform, exposes an estimated 100,000 servers globally to complete takeover. Tracked as CVE-2026-21858 with a maximum CVSS score of 10.0, the flaw allows unauthenticated attackers to execute arbitrary system commands and achieve full host compromise without triggering any alarms. The vulnerability […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Ni8mare Vulnerability in n8n Servers Exposes Thousands to Remote Code Execution A critical vulnerability, tracked as CVE-2026-21858, has been discovered in the n8n workflow automation platform, allowing unauthenticated attackers to execute arbitrary commands and potentially take over an estimated 100,000 servers worldwide. The flaw carries a maximum CVSS score of 10.0, and a proof-of-concept exploit has been released, putting numerous hosts at risk. 3 sources 40

Extracted Entities

Ni8mare Vulnerability Let Attackers Hijack n8n Servers – Exploit Released and 26,512 Hosts Vulnerable

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)