n8n security advisory (AV26-1044)
Canada’s Cyber Centre urges updates for n8n SQL injection and workflow credential-check flaws.
48
- Mentions · 7d0
- Mentions · 30d2
- All mentions4
- First seenAug 12, 2026
- Last mentioned16d ago
Timeline
4 articles · newest firstn8n security advisory (AV26-985)
Canada's Cyber Centre warns n8n builds before 1.123.80, 2.39.6, and 2.40.1 have validation-bypass and token-leak flaws.
48
London property manager breach may have exposed bank details and lockbox codes
London property manager City Relay says attackers exploited a Metabase Cloud vulnerability twice, stealing landlord bank details, passwords, and lockbox codes.
58
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase warns an actively exploited zero-day (CVE-2026-72898, CVSS 10.0) grants unauthenticated admin access; Framework, n8n, and Kilo Code disclosed data exposure.
90
Related CVEs
by mentions- CVE-2026-7289899%10.0Unauthenticated SQL Injection in Metabase Grants Admin Access
- CVE-2023-3864699%9.8Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's…
Appears with
- Frameworkorganization · 2
- n8nproduct · 2
- Frameworkvictim · 2
- Metabase Cloudproduct · 2
- Canadian Centre for Cyber Securityorganization · 2
- n8nvendor · 2
- Metabasevendor · 2
- n8nvictim · 2
- Kilo Codeorganization · 1
- City Relayvictim · 1
- CISAvendor · 1
- Wizorganization · 1
- Kilo Codevictim · 1
- City Relayorganization · 1
- CISAorganization · 1
- Metabaseproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.