10
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Description
CVE-2026-21858 + CVE-2025-68613 - n8n RCE Exploit Unauthenticated RCE chain for n8n 1.121.0 CVSS 10.0 Attack Chain 1. CVE-2026-21858 - Content-Type confusion → read /home/node/.n8n/config and database.sqlite 2. Extract encryption key and admin...
Basic Information
ID
28BF796D-6818-50C9-8DE3-9932FD61A6AE
Published
Jan 20, 2026 at 11:50
Modified
Jan 20, 2026 at 18:31