https://reddit.com/r/netsec/comments/1q6iw0y/ni8mare_unauthenticated_remote_code_execution_in/: Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)
Published Jan 7, 2026
·Updated
Affected Software
1 affected component
npm/n8n
Frequently Asked Questions
1
What is the severity of CVE-2026-21858?
CVE-2026-21858 has a critical severity rating with a CVSS score of 10.0.
2
How do I fix CVE-2026-21858?
To fix CVE-2026-21858, update to the latest version of n8n that includes the security patch.
3
What kind of attack does CVE-2026-21858 allow?
CVE-2026-21858 allows unauthorized remote code execution, enabling attackers to take control of affected n8n instances.
4
Which software is affected by CVE-2026-21858?
CVE-2026-21858 affects the n8n workflow automation tool.
5
How widespread is the impact of CVE-2026-21858?
CVE-2026-21858 is estimated to impact around 100,000 n8n servers globally.