VulnerabilitycriticalExploited in the wild

Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials

The Hacker Newsby @TheHackersNewsMar 11, 2026 · 14:51 UTC (Mar 11, 2026)3 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-27577 CVE-2026-27493 CVE-2026-27495 CVE-2026-27497

Tags: cve-2026-27493 cve-2026-27495 cve-2026-27497 cve-2026-27577 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-27493 +3 related CVEs CVE-2026-27577 CVE-2026-27497 CVE-2026-27495	n8n is an open source workflow automation platform	9.5 group max	1%		Feb 25, 2026

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Mar 11, 2026 Vulnerability / Application Security Cybersecurity researchers have disclosed details of two now-patched security flaws in the n8n workflow automation platform, including two critical bugs that could result in arbitrary command execution. CVE-2026-27577 (CVSS score: 9. 4) - Expression sandbox escape leading to remote code execution (RCE)

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.