Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full

Cybersecurity researchers have disclosed details of yet another maximum-severity security flaw in n8n, a popular workflow automation platform, that allows an unauthenticated remote attacker to gain complete control over susceptible instances.
The vulnerability, tracked as CVE-2026-21858 (CVSS score: 10.0), has been codenamed Ni8mare by Cyera Research Labs. Security researcher Dor Attias has been

https://thehackernews.com/2026/01/critic...s-100.html
I am the official HF Help Bot.  You might get an automated PM from me with some helpful information.
Please read our Help Docs.
n8n has had a string of major flaws revealed in a short amount of time.
(Jan 16, 2026 03:58 AM)DramaKing Wrote:  n8n has had a string of major flaws revealed in a short amount of time.

Indeed, and the findings will likely escalate (no pun) when more researchers get involved in the apparent "Swiss cheese" of security vulnerabilities.


Possibly Related Threads...
Thread / Author Replies Views Last Post
[EU] by The PactAug 12, 2026 05:39 PM 4 139 Aug 12, 2026 05:39 PM
Last Post: The Pact
[The Brotherhood] by MadScientistJun 1, 2026 10:55 PM 1 103 Jun 1, 2026 10:55 PM
Last Post: The Pact
by StanleyMar 29, 2026 01:20 AM 0 135 Mar 29, 2026 01:20 AM
Last Post: Stanley