Vulnerabilitycritical
Critical Zero-Click Flaw in n8n Allows Full Server Compromise
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-27493+1 related CVE | n8n is an open source workflow automation platform | 9.5 group max | 1% |
From the original article
3 min read at infosecurity-magazine.com
Researchers at Pillar Security have found two new critical vulnerabilities in self-hosted and cloud n8n deployments. N8n is a popular open-source workflow automation platform powering hundreds of thousands of enterprise AI systems worldwide. One of the flaws, tracked as CVE-2026-27493, can lead to full takeover of a server without the target clicking on anything and without the attacker needing to be authenticated.
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.