ZDI-CAN-29226 HIGH 8.1 Upcoming Feb 20, 2026

n8n

n8n is a workflow automation platform that allows users to connect and automate tasks across multiple applications. This vulnerability has a high CVSS score of 8.1 and can be exploited remotely without authentication or user interaction, potentially allowing attackers to compromise confidentiality, integrity, and availability of the system. Security teams should monitor for any patches from n8n released before the June 2026 deadline and prioritize updates to this automation platform given its potential access to multiple connected services and data sources.

Advisory Details
Researcher Peter Girnus (@gothburz), Demeng Chen (@DemengChen233), Project AESIR with TrendAI Zero Day Initiative
Reported February 20, 2026
Deadline June 20, 2026 65d
CVSS Vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy