Signal

Critical Zero-Click Flaw in n8n Allows Full Server Compromise

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-03-12 13:34 UTCUpdated 2026-03-12 15:28 UTC
rss
securitycritical_zero
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
CISA warns max-severity n8n bug is being exploited in the wild
The Register Security · News · go.theregister.com · 2026-03-12 13:34 UTC
limited source diversity in top sources
Overview

The critical vulnerability affecting both cloud and self-hosted n8n instances requires no authentication or even n8n account to be exploited.

Score total
0.82
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
All evidence
All evidence
Critical Zero-Click Flaw in n8n Allows Full Server Compromise
Infosecurity Magazine · infosecurity-magazine.com · 2026-03-12 15:28 UTC
CISA warns max-severity n8n bug is being exploited in the wild
The Register Security · go.theregister.com · 2026-03-12 13:34 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
  • Infosecurity Magazine (1)
  • The Register Security (1)
Top origin domains (this list)
  • infosecurity-magazine.com (1)
  • go.theregister.com (1)