CVE-2026-21877 CRITICAL

CVE-2026-21877: n8n is vulnerable to Remote Code Execution via Arbitrary File Write

Vendor N8N-Io
Product n8n
Weakness CWE-94 · Code injection
Published January 8, 2026
Last update January 8, 2026

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instances. This issue is fixed in version 1.121.3. Administrators can reduce exposure by disabling the Git node and limiting access for untrusted users, but upgrading to the latest version is recommended.

Key dates

02Disclosure timeline

January 8, 2026 CVE published
January 8, 2026 Record updated