DeutschShown in its original language — a full translation is planned for a future version.
n8n: Mehrere Schwachstellen
view advisory published 2026-01-07
Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-21894US | — | — | ||
n8n is an open source workflow automation platform. In versions from 0.150.0 to before 2.2.2, an authentication bypass vulnerability in the Stripe Trigger node allows unauthenticat… | ||||
| CVE-2026-21858US | — | Exploit | ||
n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of… | ||||
| CVE-2025-68613US | high8.8OT critical | KEV | ||
n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnera… | ||||
02
references
External citations — patches, advisories, analysis.
- PoC CVE-2025-68613 + CVE-2026-21858 vom 2026-01-07external
- GitHub Security Advisory GHSA-jf52-3f2h-h9j5 vom 2026-01-07external
- GitHub Security Advisory GHSA-v4pr-fm98-w9pg vom 2026-01-07external
- PoC CVE-2025-68613 vom 2026-01-07external
- WID-SEC-W-2026-0040 - CSAF Versionself
- WID-SEC-2026-0040 - Portal Versionself
- CISA Known Exploited Vulnerabilities Catalog vom 2026-03-11external
- Cyera Research vom 2026-01-07external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan