Vulnerabilitycritical

Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows

The Hacker Newsby @TheHackersNewsFeb 6, 2026 · 09:39 UTC (Feb 6, 2026)6 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2026-25049 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-25049 CVE-2025-68613 CVE-2026-21893 CVE-2026-25051 CVE-2026-25052 CVE-2026-25053 CVE-2026-25054 CVE-2026-25055 CVE-2026-25056 CVE-2026-25115 CVE-2026-25631 CVE-2025-61917 CVE-2025-62726

Tags: cve-2026-25049 cve-2025-68613 cve-2026-21893 cve-2026-25051 cve-2026-25052 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-25049 +9 related CVEs CVE-2026-21893 CVE-2026-25056 CVE-2026-25053 CVE-2026-25115 CVE-2026-25052 CVE-2026-25051 CVE-2026-25054 CVE-2025-61917 CVE-2026-25055	n8n is an open source workflow automation platform	9.4 group max	1%		Feb 4, 2026
CVE-2025-62726	n8n is an open source workflow automation platform	8.8	<1%		Oct 30, 2025
CVE-2025-68613	Authenticated RCE in n8n Workflow Automation Expression Evaluation	8.8	99%	KEVPoC ×2	Dec 19, 2025 KEV Mar 11, 2026
CVE-2026-25631	n8n is an open source workflow automation platform	5.3	<1%		Feb 6, 2026

From the original article

6 min read at thehackernews.com

A new, critical security vulnerability has been disclosed in the n8n workflow automation platform that, if successfully exploited, could result in the execution of arbitrary system commands. The flaw, tracked as CVE-2026-25049 (CVSS score: 9. 4), is the result of inadequate sanitization that bypasses safeguards put in place to address CVE-2025-68613 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.