PT-2026-55682 · N8N · N8N

CVE-2025-71380

·

Published

2025-10-09

·

Updated

2026-07-07

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions n8n (affected versions not specified)
Description The Execute Command node allows authenticated users to execute arbitrary commands on the host system where the application is running. Users with valid access or compromised credentials can leverage this functionality to run malicious commands, which may result in complete system compromise, service disruption, or data exfiltration.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-71380
GHSA-365G-VJW2-GRX8

Affected Products

N8N