Home / Mar 12, 2026 / Story
0
#9 The Hacker News general March 11, 2026 at 14:51 UTC

Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials

By [email protected] (The Hacker News)

AI Summary

Two critical n8n workflow automation platform vulnerabilities were disclosed: CVE-2026-27577 (CVSS 9.4) enabling expression sandbox escape for RCE, and CVE-2026-27493 (CVSS 9.5) allowing unauthenticated credential exposure. These flaws could result in arbitrary command execution and stored credential theft.

Relevance score: 78.0/100

# More from March 12