CVE-2026-21877
Critical · 9.9n8n Vulnerable to RCE via Arbitrary File Write
CVSS
9.9
EPSS
5.4%
Published
Jan 6, 2026
CISA due date
—
The record
n8n is affected by an authenticated Remote Code Execution (RCE) vulnerability. Under certain conditions, an authenticated user may be able to cause untrusted code to be executed by the n8n service. This could result in full compromise of the affected instance. Both self-hosted and n8n Cloud instances are impacted.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | n8n | 0.123.0 | 1.121.3 |
Related vulnerabilities
- GHSA-v364-rw7m-3263 n8n Vulnerable to RCE via Arbitrary File Write Same vulnerability
- CVE-2026-54308 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54307 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54304 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54305 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54306 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54302 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54301 n8n is an open source workflow automation platform. Also affects n8n