CVE-2026-21858
1 advisory.
npm/n8n CVE-2026-21858: critical 10
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
Action: Upgrade n8n to 1.121.0 or later.
npm i n8n@1.121.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.65.0 | 1.121.0 | - |
Fixed versions
| 1.121.0 |
Sources
- osv: GHSA-v4pr-fm98-w9pg
- https://github.com/n8n-io/n8n/security/advisories/GHSA-v4pr-fm98-w9pg
- https://nvd.nist.gov/vuln/detail/CVE-2026-21858
- https://github.com/n8n-io/n8n
- https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858
CVE-2026-21858 · published · modified · JSON