GCVE-110-ACSC-2026-0002

Advisory Published

Vulnetix · Advisory published January 8, 2026

A critical unauthenticated Remote Code Execution (RCE) vulnerability affecting n8n workflow automation platform has been observed. The critical vulnerability, tracked as CVE-2026-21858, allows unauthenticated threat actors to access sensitive files on the underlying server through execution of certain form-based workflows leading to RCE. This vulnerability is assessed as CVSS 10.0.

Download JSON Open in Console

Aliases

CVE-2026-21858

References

CRITICAL ALERT: Critical Unauthenticated Remote Code Execution vulnerability in n8n workflow automation platform

advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON