Critical n8n Vulnerabilities Enable Remote Code Execution Risks

Multiple critical vulnerabilities have been identified in the n8n workflow automation platform, allowing attackers to potentially achieve full remote code execution (RCE). These vulnerabilities, tracked as CVE-2026-44789, CVE-2026-44790, and CVE-2026-44791, affect various core nodes and impact n8n versions prior to 1.123.43, 2.20.7, and 2.22.1. Researchers have indicated that these flaws can be chained together, significantly increasing the risk of exploitation. The vulnerabilities were disclosed through GitHub Security Advisories, prompting urgent attention from users of the platform. As of now, no patches have been mentioned in the articles, leaving systems vulnerable. Organizations using affected versions are advised to assess their exposure and implement necessary security measures.

Key Points: • Critical vulnerabilities in n8n allow for potential remote code execution. • Affected versions include those prior to 1.123.43, 2.20.7, and 2.22.1. • No patches have been released yet, increasing the urgency for users to secure their systems.