n8n Workflow Tool Critical Vulnerabilities

CERT-Bund has issued a critical security advisory (WID-SEC-2026-0877) concerning multiple vulnerabilities in the n8n workflow automation tool. The vulnerabilities, rated with a CVSS Base Score of 9.9, allow remote attackers to gain elevated privileges, execute arbitrary code, manipulate data, bypass security measures, disclose confidential information, and conduct cross-site or man-in-the-middle attacks. The advisory affects n8n versions prior to 2.13.4 and applies to UNIX and Windows operating systems.

Organizations using n8n should immediately update to a patched version or implement available mitigations to prevent exploitation. Failure to address these vulnerabilities could lead to severe security breaches, including unauthorized access to sensitive data and system compromise. The advisory indicates that remote attacks are possible, emphasizing the urgency of applying updates or mitigations.