CVE-2026-21858

Critical10.0Published on January 7, 2026

n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the system and may enable further compromise depending on deployment configuration and workflow usage. This issue is fixed in version 1.121.0.

Early warning: exploitation observed

Exploitation observed since Jan 9, 2026
Not yet in the official CISA catalogue
First attack observed 1 day after disclosure
Confirmed by sensors, not only by reports

Source: VulnCheck KEV · Sep 15, 2026 Sep 11, 2026 Sep 10, 2026 Sep 9, 2026 Sep 8, 2026 Sep 5, 2026

CVSS score10.0 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Weakness type (CWE)CWE-20

Vendorsn8n

Affected products

Vendors	Product	Versions
n8n	n8n	< 1.121.0

AI Agent Orchestrated via Telegram Conducts Autonomous Attacks: Over 460 Targets Hit

Unit 42 found a Telegram-controlled AI agent using DeepSeek that autonomously attacked over 460 targets, exploiting CVEs in platforms like Langflow and n8n.

Jul 31, 202623:103 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Early warning: exploitation observed

Affected products

Related articles

AI Agent Orchestrated via Telegram Conducts Autonomous Attacks: Over 460 Targets Hit