The flaw allows authenticated n8n users with workflow-creation or modification permissions to bypass the intended security sandbox.
CVE-2026-21877, a critical authenticated RCE flaw with CVSS 10.0, fixed in version 1.121.3 after affecting earlier releases.
A critical CVSS 10.0 vulnerability in n8n allows unauthenticated attackers to read files, bypass authentication, and gain ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback