Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows

Certains articles de veille peuvent faire l'objet de traduction automatique.

A new, critical security vulnerability has been disclosed in the n8n workflow automation platform that, if successfully exploited, could result in the execution of arbitrary system commands.
The flaw, tracked as CVE-2026-25049 (CVSS score: 9.4), is the result of inadequate sanitization that bypasses safeguards put in place to address CVE-2025-68613 (CVSS score: 9.9), another critical defect that

Source : https://thehackernews.com/2026/02/critical-n8n-flaw-cve-2026-25049.html