CVE-2026-21858

CVE-2026-21858 n8n工作流自动化平台 - 远程代码执行 一个用于检测CVE-2026-21858的安全研究工具，该漏洞是n8n工作流自动化平台中的一个严重远程代码执行漏洞。 目录 漏洞摘要 受影响版本 技术分析 先决条件 安装 使用方法 输出参考 检测方法 缓解与修复 入侵指标 法律声明 参考资料 致谢 漏洞摘要 字段| 值 ---|--- CVE标识符| CVE-2026-21858 CVSS v3.1评分| 10.0 严重 CVSS向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CWE分类| CWE-94：代码生成控制...

PoC-CVE-2026-21858

PoC-CVE-2026-21858 n8n 是一个开源工作流自动化平台。从 1.65.0 到 1.121.0 之前的版本，攻击者可以通过执行某些基于表单的工作流来访问底层服务器上的文件。易受攻击的工作流可能授予未经身份验证的远程攻击者访问权限，导致系统上存储的敏感信息泄露，并可能根据部署配置和工作流使用情况实现进一步入侵。此问题已在 1.121.0 版本中修复。 https://nvd.nist.gov/vuln/detail/CVE-2026-21858 使用方法 root@kitploit: ❯ python CVE-2026-21858.py -h usage:...

⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More

This week made one thing clear: small oversights can spiral fast. Tools meant to save time and reduce friction turned into easy entry points once basic safeguards were ignored. Attackers didn't need novel tricks. They used what was already exposed and moved in without resistance. Scale amplified...

n8n Node.js Package 1.65.0 < 1.121.0 Improper Access Control (Ni8Mare)

The version of the n8n Node.js Package installed on the remote host is prior to 1.121.0. It is, therefore, affected by an improper access control vulnerability: - A vulnerability in n8n allows an attacker to access files on the underlying server through execution of certain form-based workflows. ...

Vulnerability fixed in n8n

N8n has fixed a vulnerability in versions below 1.121.0. The vulnerability in allows unauthorized external malicious parties to access files on the underlying server via specific, form-based workflows. This could expose sensitive information stored on the system and, depending on the configuratio...