#n8n
All CosmicBytez Labs articles tagged #n8n, across news, security advisories, how-to guides, and projects.
- News
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit
This week: Gogs CVSS 10.0 RCE via path traversal, n8n prototype pollution, Iran IRGC $10M bounty, and GLM-5.3 AI discovering 2,436 vulnerabilities.
- News
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
A high-severity expression sandbox escape in n8n allows authenticated workflow editors to execute operating-system commands on the host server. Security...
- News
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL
A coordinated wave of critical security patches landed this week from Ivanti, Fortinet, SAP, VMware, and n8n. Topping the list is CVE-2026-8043 in Ivanti...
- Newsletter
Mar 17 Digest: GlassWorm Poisons Python, n8n RCE Hits KEV
This week: GlassWorm escalates with 72 malicious Open VSX extensions and a GitHub token force-push campaign poisoning hundreds of Python repos; CISA adds...
- News
CISA Flags Actively Exploited n8n RCE Bug as 24,700
CISA added CVE-2025-68613 — a CVSS 9.9 remote code execution flaw in n8n's workflow expression evaluator — to its Known Exploited Vulnerabilities catalog...
- News
CISA Orders Federal Agencies to Patch n8n RCE Flaw
CISA mandated all federal civilian agencies patch CVE-2025-68613, a CVSS 9.9 remote code execution flaw in the n8n workflow automation platform, after...
- News
Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft
Security researchers have published details of two newly patched critical vulnerabilities in n8n — CVE-2026-27577 (CVSS 9.4), an expression sandbox escape...
- Security
CVE-2025-68613: n8n Remote Code Execution via Improper
CISA adds CVE-2025-68613 to the Known Exploited Vulnerabilities catalog — a CVSS 9.9 flaw in n8n's workflow expression evaluation system that enables...
- Security
Eight Critical n8n Vulnerabilities: Sandbox Escape to Unauthenticated RCE
Popular workflow automation platform n8n hit with eight high-to-critical CVEs including a CVSS 10.0 unauthenticated RCE and sandbox escape bypassing...
- Security
Critical n8n Vulnerability (CVSS 10.0) Enables Complete
A maximum-severity flaw dubbed 'Ni8mare' in the popular workflow automation platform n8n allows unauthenticated attackers to gain full control of...