https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:28:42.574889+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-01284 bdu:2026-01284 2026-10-02T14:28:42.640119+00:00 bdu:2026-01284 https://cve.radiocsirt.org/vuln/euvd-2026-267455 EUVD-2026-267455 2026-10-02T14:28:42.640157+00:00 EUVD-2026-267455 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25049 fkie_cve-2026-25049 2026-10-02T14:28:42.640172+00:00

n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n. This issue has been patched in versions 1.123.17 and 2.5.2.

 https://cve.radiocsirt.org/vuln/ghsa-6cqr-8cfr-67f8 GHSA-6cqr-8cfr-67f8 — n8n Has Expression Escape Vulnerability Leading to RCE 2026-10-02T14:28:42.640204+00:00

Affected: npm: n8n

### Impact

Additional exploits in the expression evaluation of n8n have been identified and patched following [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp).

An authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n.

### Patches

The issue has been fixed in n8n versions 1.123.17 and 2.5.2. Users should upgrade to these versions or later to remediate the vulnerability.

### Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:

- Limit workflow creation and editing permissions to fully trusted users only. - Deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

### Resources

- Best practices for [securing n8n](https://docs.n8n.io/hosting/securing/overview/) - Initial vulnerability advisory: [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp)

---

n8n has adopted CVSS 4.0 as primary score for all security advisories. CVSS 3.1 vector strings are provided for backward compatibility.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

 https://cve.radiocsirt.org/vuln/ncsc-2026-0049 NCSC-2026-0049 — Kwetsbaarheden verholpen in n8n 2026-10-02T14:28:42.640247+00:00 NCSC-2026-0049 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0318 WID-SEC-W-2026-0318 — n8n: Mehrere Schwachstellen 2026-10-02T14:28:42.640275+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Code auszuführen, sich erhöhte Berechtigungen zu verschaffen, Cross-Site-Scripting-Angriffe durchzuführen und vertrauliche Informationen offenzulegen. Über einige dieser Schwachstellen sind weitere Angriffe möglich, wie beispielsweise die Übernahme von Konten, das Hijacking von Sitzungen und die vollständige Kompromittierung des Systems.