ZDI-CAN-29226
HIGH 8.1
Upcoming
Feb 20, 2026
n8n
n8n is a workflow automation platform that allows users to connect and automate tasks across multiple applications. This vulnerability has a high CVSS score of 8.1 and can be exploited remotely without authentication or user interaction, potentially allowing attackers to compromise confidentiality, integrity, and availability of the system. Security teams should monitor for any patches from n8n released before the June 2026 deadline and prioritize updates to this automation platform given its potential access to multiple connected services and data sources.
Advisory Details
Researcher
Peter Girnus (@gothburz), Demeng Chen (@DemengChen233), Project AESIR with TrendAI Zero Day Initiative
Reported
February 20, 2026
Deadline
June 20, 2026
65d
CVSS Vector
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H