A new, critical security vulnerability has been disclosed in the n8n workflow automation platform. If successfully exploited, this flaw could result in the execution of arbitrary system commands. The flaw, tracked as CVE-2026-25049 (CVSS score: 9.4), stems from inadequate sanitization. It bypasses safeguards implemented to address CVE-2025-68613 (CVSS score: 9.9), another critical defect.
A new, critical security vulnerability has been disclosed in the n8n workflow automation platform. If successfully exploited, this flaw could result in the execution of arbitrary system commands.
The flaw, tracked as CVE-2026-25049 (CVSS score: 9.4), stems from inadequate sanitization. It bypasses safeguards implemented to address CVE-2025-68613 (CVSS score: 9.9), another critical defect.