Skip to content
Critical n8n Vulnerabilities Enable Remote Code Execution Risks

Critical n8n Vulnerabilities Enable Remote Code Execution Risks

First seen 18 May 2026, 21:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 19, 2026 at 21:19 UTC
  • •Critical vulnerabilities in n8n allow for potential remote code execution.
  • •Affected versions include those prior to 1.123.43, 2.20.7, and 2.22.1.
  • •No patches have been released yet, increasing the urgency for users to secure their systems.

Multiple critical vulnerabilities have been identified in the n8n workflow automation platform, allowing attackers to potentially achieve full remote code execution (RCE). These vulnerabilities, tracked as CVE-2026-44789, CVE-2026-44790, and CVE-2026-44791, affect various core nodes and impact n8n versions prior to 1.123.43, 2.20.7, and 2.22.1. Researchers have indicated that these flaws can be chained together, significantly increasing the risk of exploitation. The vulnerabilities were disclosed through GitHub Security Advisories, prompting urgent attention from users of the platform. As of now, no patches have been mentioned in the articles, leaving systems vulnerable. Organizations using affected versions are advised to assess their exposure and implement necessary security measures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 125d ago How this analysis works

Timeline

2026-05-18
Critical vulnerabilities disclosed
Researchers disclosed multiple critical vulnerabilities in n8n that could lead to full remote code execution.
Cybersecuritynews
2026-05-18
Vulnerabilities tracked as CVEs
The vulnerabilities are tracked as CVE-2026-44789, CVE-2026-44790, and CVE-2026-44791, impacting core nodes.
Gbhackers

More articles in this cluster (3)

Following this threat?

Track CVE-2026-44789 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 2