n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions
The workflow automation platform n8n has issued a warning about a critical CVSS 10.0 vulnerability (CVE-2026-21877) that allows for remote code execution (RCE) in both self-hosted and cloud versions. This flaw, impacting versions >= 0.123.0 and < 1.121.3, has been fixed in version 1.121.3, and users are urged to upgrade or implement mitigation strategies like disabling the Git node.