Qualys reports a critical n8n vulnerability (CVE-2026-33660) where authenticated attackers can bypass sandboxing and execute arbitrary commands, a major risk for automation workflows that often run with broad integrations.
A critical remote code execution vulnerability has been identified in n8n, the popular open-source workflow automation tool.
Tracked as CVE-2026-33660 with a CVSS score of 9.4, this flaw allows authenticated attackers to bypass sandboxing and execute arbitrary commands
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security