Not scored
CVE-2026-25049
No description published yet
Vendor not yet named
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 4 Sep
1.4%probability of exploitation in the next 30 days
Higher than 72% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
NVD has not published a description yet.
Coverage 4 articles · 4 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 5 Feb · 06:46 UTC | The Hacker News | Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows |
| Thu 5 Feb · 11:50 UTC | SecurityWeek | Critical N8n Sandbox Escape Could Lead to Server Compromise |
| Thu 5 Feb · 13:35 UTC | SOCRadar | CVE-2026-25049: n8n Expression Sandbox Escape Enables RCE |
| Fri 6 Feb · 01:41 UTC | SecurityOnline | Popular n8n Platform Hit by Triple Threat of RCE Flaws |
- Popular n8n Platform Hit by Triple Threat of RCE FlawsSecurityOnline · mentions it in passing
- CVE-2026-25049: n8n Expression Sandbox Escape Enables RCESOCRadar
- Critical N8n Sandbox Escape Could Lead to Server CompromiseSecurityWeek
- Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious WorkflowsThe Hacker News · first in our coverage