Vulnerabilities · 59 days ago

n8n Flaws Let Input Become Execution

n8n was letting outside data cross the line from input to action. That means a self-hosted automation server can become the place where code runs, files get written, or fake triggers are accepted as real, which is a bigger failure than a single broken node.

NCSC says multiple high-severity flaws were fixed in 2.10.1, 2.9.3, 1.123.22 and related releases. The advisory spans Form nodes, the Python Code node, the JavaScript Task Runner sandbox, Merge, Read/Write Files from Disk, workflow expression evaluation, core workflow editing, GitHub Webhook Trigger, ZendeskTrigger, Guardrail, and Chat Trigger, with issues including code injection, eval injection, improper authentication, authorization bypass, and missing webhook signature checks.

For teams self-hosting n8n, the risk is not limited to one feature or one CVE. If the platform handles sensitive credentials or production integrations, an unpatched instance can expose the automation plane and the systems it controls, even when the original workflow looks harmless.

Timeline

• Jul 17 Reported by NCSC-NL Advisories

Sources

1 source covering this story

• NCSC-NL Advisories Jul 17

  Kwetsbaarheden verholpen in n8n workflow automation platform

  n8n heeft meerdere kwetsbaarheden verholpen in het n8n workflow automation platform, specifiek in versies voor 2.10.1, 2.9.3, 1.123.22 en andere gerelateerde releases.

• NCSC-NL Advisories Jul 13

  Kwetsbaarheden verholpen in n8n workflow automation platform

  n8n heeft meerdere kwetsbaarheden verholpen in het n8n workflow automation platform.

Entities

• CVE-2026-27493
• CVE-2026-27494
• CVE-2026-27495
• CVE-2026-27497

Part of the PlainSec briefing for 2026-07-17

Editions

• Briefing for 2026-07-17

Related stories

• WordPress PoCs Leave Artifacts as Windmill Is Hit
• Siemens OT Switches Can Keep Root After Reboot
• Legacy Shim Revocations Leave Secure Boot Gaps