Vulnerabilitycritical

n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self

The Hacker Newsby @TheHackersNewsJan 7, 2026 · 11:26 UTC (Jan 7, 2026)1 min read2

Read at thehackernews.com

Analyze CVE-2026-21877 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-21877 CVE-2025-68613 CVE-2025-68668

Tags: cve-2026-21877 cve-2025-68613 cve-2025-68668 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-68613	Authenticated RCE in n8n Workflow Automation Expression Evaluation	8.8	99%	KEVPoC ×2	Dec 19, 2025 KEV Mar 11, 2026
CVE-2025-68668	n8n is an open source workflow automation platform	9.9	13%		Dec 26, 2025
CVE-2026-21877	n8n is an open source workflow automation platform	9.9	5%		Jan 8, 2026

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jan 07, 2026 Vulnerability / Cloud Security Open-source workflow automation platform n8n has warned of a maximum-severity security flaw that, if successfully exploited, could result in authenticated remote code execution (RCE). The vulnerability, which has been assigned the CVE identifier CVE-2026-21877 , is rated 10. 0 on the CVSS scoring system.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.