CVE-2026-25049 - Vulnerability Details

Related Threat Clusters

• Critical RCE Vulnerability in n8n via Sandbox Escape (CVE-2026-25049)

  CVE-2026-25049, published on February 4, 2026, is a critical vulnerability in n8n that allows authenticated users to execute remote system commands through a sandbox escape. This vulnerability has a CVSS score of 9.8,…

  2 articles · Updated February 5, 2026
• Critical Vulnerabilities in n8n Workflow Automation Platform Disclosed

  Multiple critical vulnerabilities in the n8n open-source workflow automation platform were disclosed, allowing authenticated users to execute remote code on the server. These vulnerabilities, tracked as CVE-2026-25049,…

  61 articles · Updated February 4, 2026

Recent Intelligence Reports

• CVE-2026-25049 (CVSS 9.3) n8n RCE Flaws Expose Automation Risks — Purple-Ops · February 6, 2026
• CVE-2026-25053 (CVSS 9.4) and Related Flaws Trigger RCE on n8n — Purple-Ops · February 6, 2026
• CVE-2026-25049 (CVSS 9.8) Critical n8n RCE via Sandbox Escape — Purple-Ops · February 5, 2026
• CVE-2026-25049: n8n Expression Sandbox Escape Enables RCE — Socradar · February 5, 2026
• Critical N8n Sandbox Escape Could Lead to Server Compromise — Ground.News · February 5, 2026
• n8n security woes roll on as new critical flaws bypass December fix — Theregister · February 5, 2026
• n8n security woes roll on as new critical flaws bypass December fix — Theregister · February 5, 2026
• Critical n8n Vulnerability CVE-2026 — Thecyberexpress · February 5, 2026

Related Entities