Purple-Ops

Critical RCE Vulnerability in n8n via Sandbox Escape (CVE-2026-25049)

First seen 6 Feb 2026, 06:07 UTC • Socradar

•67.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

CVE-2026-25049, published on February 4, 2026, is a critical vulnerability in n8n that allows authenticated users to execute remote system commands through a sandbox escape. This vulnerability has a CVSS score of 9.8, indicating its severity. Users of n8n are advised to implement mitigation steps to secure their automation environments.

How this analysis works

Attack Flow

Continue Reading

Critical n8n Vulnerability Enables Arbitrary Command Execution Critical RCE Vulnerability in n8n Affects Over 100K Servers Critical n8n RCE Vulnerability Exploit Code Released Iranian APT Groups Target Israeli Organizations with Modular C2 Frameworks Critical RCE Vulnerability in Marimo Exploited Within 10 Hours of Disclosure Langflow IDOR Exploit and Critical Vulnerabilities Targeting AI Platforms

Critical RCE Vulnerability in n8n via Sandbox Escape (CVE-2026-25049)

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading