{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.113.0"}],"component":"n8n-nodes-base","cve_ids":["CVE-2025-71380"],"ecosystem":"npm","epss":0.00571,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-365g-vjw2-grx8","id":"tcs_01M5KEW6E1W5VV7PRB3NNCBYPW","modified_at":"2026-07-08T07:35:34.716078937Z","published_at":"2025-10-09T15:26:59Z","references":["https://osv.dev/vulnerability/GHSA-365g-vjw2-grx8","https://github.com/n8n-io/n8n/security/advisories/GHSA-365g-vjw2-grx8","https://github.com/n8n-io/n8n"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-365g-vjw2-grx8","url":"https://osv.dev/vulnerability/GHSA-365g-vjw2-grx8"}],"summary":"n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host"}