+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full (/showthread.php?tid=6317857)
Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full - Stanley - Jan 16, 2026
Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full
Cybersecurity researchers have disclosed details of yet another maximum-severity security flaw in n8n, a popular workflow automation platform, that allows an unauthenticated remote attacker to gain complete control over susceptible instances.
The vulnerability, tracked as CVE-2026-21858 (CVSS score: 10.0), has been codenamed Ni8mare by Cyera Research Labs. Security researcher Dor Attias has been
https://thehackernews.com/2026/01/critical-n8n-vulnerability-cvss-100.html
RE: Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full - DramaKing - Jan 16, 2026
n8n has had a string of major flaws revealed in a short amount of time.
RE: Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full - Sodan42 - Jan 16, 2026
(Jan 16, 2026 03:58 AM)DramaKing Wrote: n8n has had a string of major flaws revealed in a short amount of time.
Indeed, and the findings will likely escalate (no pun) when more researchers get involved in the apparent "Swiss cheese" of security vulnerabilities.