@stackflag.bsky.socialCVE-2026-110845 - n8n
In older versions of n8n, a feature that reads Git logs does not remove a repository's local settings before calling an external program. If a logged‑in user can choose a repository they…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-110842 - n8n
The n8n automation tool lets a user who can only view workflows change internal code and trick the system into thinking they have higher permissions. This can let them take over accounts that…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-85169 - n8n
Versions of n8n released before 1.123.73 (including earlier 2.x releases) let a user who can create workflows add hidden commands that run any program on the server. This could let an attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com