Paper outlines a seven-agent n8n workflow for log forensics
Agents built on n8n and Gemini pass results layer by layer; authors tested 16 cases and call the findings promising.
Stories per day · 30 days
4 RSS
Relatedics2workflow-automation2access-control1advisory1attack-surface1career1cccs1censys1cisa1cleo1cyble1data-exposure1exposure1forensics1gemini1honeypot1internet-scanning1langflow1
10 stories, newest first · one card per story
Stories tagged #n8n
n8n before 2.44.1 and 2.43.5 can expose other projects' data tables
Canada's Cyber Centre says a crafted workflow ID can reach data tables in other n8n projects and urges updates.
n8n security advisory (AV26-1044)
Canada’s Cyber Centre urges updates for n8n SQL injection and workflow credential-check flaws.
The internet’s attack surface moves at very different speeds
Censys says publicly exposed AI software grew 63% in nine months, led by vulnerable n8n hosts.
3
The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
Cyble sensors logged exploitation attempts against about 20 flaws as CISA issued 14 ICS advisories.
n8n security advisory (AV26-985)
Canada's Cyber Centre warns n8n builds before 1.123.80, 2.39.6, and 2.40.1 have validation-bypass and token-leak flaws.
Weird Machine Compositors: Exploiting AI Orchestration at the Expression Layer
Paper shows n8n expression sandboxes can be bypassed, citing three CVEs including two CVSS 9.4 flaws.
n8n security advisory (AV26-916)
Canadian Cyber Centre advisory AV26-916 warns n8n before versions 2.37.7, 2.38.2, and 1.123.76 is affected by an undisclosed vulnerability; patch required.
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet
Researchers counted 36,769 publicly reachable self-hosted AI endpoints, only about 2% behind HTTP authentication, exposing Ollama, vLLM, and Flowise to abuse.
10
n8n security advisory (AV26-880)
Canada's Cyber Centre flagged multiple n8n vulnerabilities in versions prior to 1.123.76 and several 2.x releases, urging users to update.