Skip to content
NewA calmer, faster ZeroHour

Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas

The Hacker Newsby @TheHackersNews ()3 min read3
Analyze CVE-2026-24002 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-68668
n8n is an open source workflow automation platform
9.913%
CVE-2026-24002
Grist is spreadsheet software using Python as its formula language
9.6<1%

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Jan 27, 2026 Vulnerability / Cloud Security A critical security flaw has been disclosed in Grist‑Core , an open-source, self-hosted version of the Grist relational spreadsheet-database, that could result in remote code execution. The vulnerability, tracked as CVE-2026-24002 (CVSS score: 9. 1), has been codenamed Cellbreak by Cyera Research Labs.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.