A Sneaky Credential Bypass in n8n Workflows A recent discovery has highlighted a security flaw in n8n, a popular workflow automation tool. This vulnerability, tracked as CVE-2026-72774, could allow an authenticated user with specific access to a shared workflow to…
Overview A critical security flaw has been identified in n8n, an open-source workflow automation platform. This vulnerability, tracked as CVE-2026-72767, allows authenticated users to execute unauthorized code on the n8n server. An attacker with privileges to create and execute workflows…
Understanding the n8n Module Cache Poisoning Vulnerability A significant security flaw, identified as CVE-2026-72764, has been discovered in n8n, a popular workflow automation tool. This vulnerability impacts multi-user n8n instances, specifically those running its JavaScript task runner with built-in or…
A security flaw has been found in n8n, a popular workflow automation tool. This vulnerability could allow an authorized user to access sensitive local files or perform server-side request forgery (SSRF) attacks. This means an attacker could potentially read files…
Unintended Access to Project Data in n8n A security flaw has been found in n8n, a workflow automation tool, that could allow unauthorized access to sensitive project details. This vulnerability, identified as CVE-2026-85173, affects the Insights API routes within n8n.…
Overview The workflow automation tool n8n has a security vulnerability that could expose sensitive user credentials. This flaw affects specific nodes within the system, allowing authenticated users to accidentally uncover plaintext login information. This happens because certain nodes mishandle credentials…
