JFrog security researchers have exposed two critical vulnerabilities (CVE-2026-1470, rated 9.9; and CVE-2026-0863, rated 8.5) in the n8n workflow automation platform.

Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.

Two vulnerabilities in the n8n workflow automation platform could allow attackers to fully compromise affected instances, access sensitive data, and execute arbitrary code on the underlying host.

A previously published patch left a gaping hole that crooks will happily exploit.

The no-code automation solution n8n is very popular, as it allows even programming beginners to set up complex workflows with a graphical tool, make API requests, and use LLMs automatically. However, ...

I started using n8n only a few months ago, and it’s safe to say it’s one of the most promising pieces of software I’ve used this year. I don’t know how to code and only have a working knowledge of ...