CVE-2026-27493

creationtimestamp| type| source ---|---|--- 2026-02-26 01:23:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpzvoee2m2e 2026-02-26 11:50:14+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2 2026-03-11 13:51:00+00:00| seen|...

CVE-2026-27493 n8n has Unauthenticated Expression Evaluation via Form Node

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form...