#9
The Hacker News
general
March 11, 2026 at 14:51 UTC
Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials
By [email protected] (The Hacker News)
AI Summary
Two critical n8n workflow automation platform vulnerabilities were disclosed: CVE-2026-27577 (CVSS 9.4) enabling expression sandbox escape for RCE, and CVE-2026-27493 (CVSS 9.5) allowing unauthenticated credential exposure. These flaws could result in arbitrary command execution and stored credential theft.
Relevance score: 78.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →