Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-21858

86
FAUCET Score

CVE-2026-21858 is a critical vulnerability affecting n8n workflow automation platform versions 1.65.0 through 1.120.0. It allows an unauthenticated remote attacker to access files on the underlying server via specially crafted form-based workflows, potentially leading to sensitive information exposure and further system compromise. With a CVSS score of 10.0, this flaw is easily exploitable over the network with no user interaction, enabling high impact to confidentiality and integrity. While not officially listed as actively exploited in KEV, public exploit code (Nuclei templates) and extensive community discussion, including reports of full RCE, indicate a high likelihood of exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
>= 1.65.0, < 1.121.0CPE matchmatch criteria
cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 3.1

10.0CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
5.8
CvssVersion
3.1

Exploit Intelligence

EPSS Score
71.65%
Probability of exploitation in next 30 days
EPSS Percentile
99.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Nuclei: CVE-2026-21858 · Jan 8, 2026
This CVE's current EPSS score of 0.7165 is in the 98th percentile among its peer group of 36,862 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

npmpatch availablevia ghsa
Product: n8nFixed in: 1.121.0
github_advisoryvendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

npmGHSA-v4pr-fm98-w9pgcritical

n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling

Jan 7, 2026

References

github.com / n8n-io/n8n/security/advisories/GHSA-v4pr-fm98-w9pg
Vendor Advisory
cyera.com / research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858
ExploitThird Party Advisory