Skip to content
Critical Ni8mare Vulnerability in n8n Servers Exposes Thousands to Remote Code Execution

Critical Ni8mare Vulnerability in n8n Servers Exposes Thousands to Remote Code Execution

First seen 8 Jan 2026, 13:50 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

A critical vulnerability, tracked as CVE-2026-21858, has been discovered in the n8n workflow automation platform, allowing unauthenticated attackers to execute arbitrary commands and potentially take over an estimated 100,000 servers worldwide. The flaw carries a maximum CVSS score of 10.0, and a proof-of-concept exploit has been released, putting numerous hosts at risk.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 183d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track CVE-2026-21858 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed