Critical Unauthenticated File Access Vulnerability Affecting n8n
A critical vulnerability affecting n8n would allow an unauthenticated malicious actor to access sensitive files on affected systems.
Description
Technical context and vulnerability details
n8n is an open source workflow automation platform, used to orchestrate and automate business processes by connecting different services, APIs and applications. It offers features such as integrating third-party services, running custom scripts, and managing complex workflows. This product is affected by a vulnerability labeled CVE-2026-21858, which results from inappropriate handling of webhook or forms requests. Exploitation of this vulnerability would allow an unauthenticated attacker to access files on the underlying server via execution of certain forms-based workflows. It is classified critical with a severity score of 10.0 according to CVSS V3.1.
Potential Risks & Impact
Potential consequences upon exploitation
- Data privacy breach;
- Compromise of system integrity;
Affected systems
Products, components and targeted versions
- n8n versions from 1.65.0 and earlier than 1.121.0;
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Update n8n to version 1.121.0 or later;
- Restrict or disable public hotspots for webhooks and forms until update;
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.