Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution

Certains articles de veille peuvent faire l'objet de traduction automatique.

Cybersecurity researchers have disclosed two new security flaws in the n8n workflow automation platform, including a crucial vulnerability that could result in remote code execution.
The weaknesses, discovered by the JFrog Security Research team, are listed below –

CVE-2026-1470 (CVSS score: 9.9) – An eval injection vulnerability that could allow an authenticated user to bypass the Expression

Source : https://thehackernews.com/2026/01/two-high-severity-n8n-flaws-allow.html