Arcticwolf

Critical Vulnerability CVE-2026-21858 Discovered in n8n Automation Tool

First seen 13 Jan 2026, 20:07 UTC • Arcticwolf

•47.0

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

On January 7, 2026, a patch was released for CVE-2026-21858, a maximum severity vulnerability affecting n8n, a workflow automation application. This vulnerability could potentially allow unauthorized access and manipulation of workflows within the application, posing significant risks to users relying on n8n for automation tasks.

How this analysis works

Attack Flow

19 entities, 48 inferred relationships (STIX 2.1).

Technique (5)

Data Breach
DDoS
Privilege Escalation
Sql Injection
Zero-day Exploit

Organization (1)

Azure

Vulnerability (6)

CVE-2023-31096
CVE-2026-20805
CVE-2026-21858
XSS
Use After Free In Windows DWM
Use After Free In Windows Management Services

Affected Platform (7)

Microsoft Graphics Component
Microsoft Office
Microsoft Office Excel
Microsoft Office SharePoint
N8n
Windows
Windows Management Services

Relationships

CVE-2023-31096 targets Microsoft Graphics Component
CVE-2023-31096 targets Microsoft Office
CVE-2023-31096 targets Microsoft Office Excel
CVE-2023-31096 targets Microsoft Office SharePoint
CVE-2026-20805 targets Microsoft Graphics Component
CVE-2026-20805 targets Microsoft Office
CVE-2026-20805 targets Microsoft Office Excel
CVE-2026-20805 targets Microsoft Office SharePoint
CVE-2026-21858 targets Microsoft Graphics Component
CVE-2026-21858 targets Microsoft Office
CVE-2026-21858 targets Microsoft Office Excel
CVE-2026-21858 targets Microsoft Office SharePoint
XSS targets Microsoft Graphics Component
XSS targets Microsoft Office
XSS targets Microsoft Office Excel
XSS targets Microsoft Office SharePoint
Use After Free In Windows DWM targets Microsoft Graphics Component
Use After Free In Windows DWM targets Microsoft Office
Use After Free In Windows DWM targets Microsoft Office Excel
Use After Free In Windows DWM targets Microsoft Office SharePoint
Use After Free In Windows Management Services targets Microsoft Graphics Component
Use After Free In Windows Management Services targets Microsoft Office
Use After Free In Windows Management Services targets Microsoft Office Excel
Use After Free In Windows Management Services targets Microsoft Office SharePoint
Data Breach targets Microsoft Graphics Component
Data Breach targets Microsoft Office
Data Breach targets Microsoft Office Excel
Data Breach targets Microsoft Office SharePoint
DDoS targets Microsoft Graphics Component
DDoS targets Microsoft Office
DDoS targets Microsoft Office Excel
DDoS targets Microsoft Office SharePoint
Privilege Escalation targets Microsoft Graphics Component
Privilege Escalation targets Microsoft Office
Privilege Escalation targets Microsoft Office Excel
Privilege Escalation targets Microsoft Office SharePoint
Sql Injection targets Microsoft Graphics Component
Sql Injection targets Microsoft Office
Sql Injection targets Microsoft Office Excel
Sql Injection targets Microsoft Office SharePoint
Zero-day Exploit targets Microsoft Graphics Component
Zero-day Exploit targets Microsoft Office
Zero-day Exploit targets Microsoft Office Excel
Zero-day Exploit targets Microsoft Office SharePoint
CVE-2023-31096 related to Azure
CVE-2023-31096 related to N8n
CVE-2023-31096 related to Windows
CVE-2023-31096 related to Windows Management Services

Continue Reading

AzCopy Utility Exploited in Ransomware Data Exfiltration Campaigns Lazarus Group Exploits Windows Zero-Day to Target Defense Sector FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud MuddyWater Targets U.S. Entities Amid Geopolitical Tensions ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

Critical Vulnerability CVE-2026-21858 Discovered in n8n Automation Tool

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading