{"id":"CVE-2026-21858","published":"2026-01-07T23:57:52Z","modified":"2026-01-12T18:37:27Z","title":"n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling","vendor":"n8n-io","product":"n8n","tier":"core","eol":null,"affectedVersions":[{"vendor":"n8n-io","product":"n8n","versions":[">= 1.65.0, < 1.121.0"]}],"description":{"text":"n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the system and may enable further compromise depending on deployment configuration and workflow usage. This issue is fixed in version 1.121.0.","provenance":"source","from":"CVE.org"},"summary":{"text":"The n8n workflow automation platform, in versions from 1.65.0 before 1.121.0, contains a flaw in how form-based workflows handle incoming webhook requests. An unauthenticated remote attacker can exploit a vulnerable workflow over the network, with no user interaction required, to read files on the underlying server, potentially exposing sensitive stored information and enabling further compromise depending on deployment configuration and how the workflow is used.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:11:29Z"},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.78188,"percentile":0.99578,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-01-09","exploitedFirstSeen":"2026-01-09","ransomware":false,"evidence":[{"url":"https://beelzebub.ai/blog/catching-ni8mare-in-the-wild-cve-2026-21858/","date":"2026-01-09"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-01-27&host_type=src&vulnerability=cve-2026-21858","date":"2026-01-27"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-03&host_type=src&vulnerability=cve-2026-21858","date":"2026-02-03"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-04&host_type=src&vulnerability=cve-2026-21858","date":"2026-02-04"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-05&host_type=src&vulnerability=cve-2026-21858","date":"2026-02-05"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-06&host_type=src&vulnerability=cve-2026-21858","date":"2026-02-06"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-07&host_type=src&vulnerability=cve-2026-21858","date":"2026-02-07"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-08&host_type=src&vulnerability=cve-2026-21858","date":"2026-02-08"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-10&host_type=src&vulnerability=cve-2026-21858","date":"2026-02-10"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-12&host_type=src&vulnerability=cve-2026-21858","date":"2026-02-12"}],"evidenceTotal":136,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Hacker uses DeepSeek AI to autonomously attack vulnerable servers [BleepingComputer]","url":"https://otx.alienvault.com/pulse/6a6ddedc79742b7178374cfd","created":"2026-08-01"},{"name":"Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks [Unit 42]","url":"https://otx.alienvault.com/pulse/6a6dc31261e93f66ada4be1f","created":"2026-08-01"},{"name":"ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories [The Hacker News]","url":"https://otx.alienvault.com/pulse/6a6d9914abcabdfe6e5215c4","created":"2026-08-01"},{"name":"Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks [The Hacker News]","url":"https://otx.alienvault.com/pulse/6a6d98feaf9f3cf03e86c190","created":"2026-08-01"},{"name":"APT29","url":"https://otx.alienvault.com/pulse/69f46a108000bd36fe90d5be","created":"2026-05-01"},{"name":"Known_Cve | Mar 31, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/69ca8519c290268fd9da68cc","created":"2026-03-30"},{"name":"Known_Cve | Mar 30, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/69ca0daa0d61a3082fccd483","created":"2026-03-30"},{"name":"Known_Cve | Mar 30, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/69c932c178f05822e0970ce2","created":"2026-03-29"},{"name":"Known_Cve | Mar 28, 2026 | Part 2/3","url":"https://otx.alienvault.com/pulse/69c69277127fedcfcf9349b0","created":"2026-03-27"},{"name":"Known_Cve | Mar 25, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/69c2a5c024c4e0dbda79a32f","created":"2026-03-24"}],"provenance":"machine"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-v4pr-fm98-w9pg","tags":["x_refsource_CONFIRM"]},{"url":"https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"npm","package":"n8n","vulnerableRanges":[">=1.65.0, <1.121.0"],"patched":["1.121.0"],"from":["GHSA-v4pr-fm98-w9pg"],"provenance":"source"}],"advisories":[{"id":"GHSA-v4pr-fm98-w9pg","url":"https://github.com/advisories/GHSA-v4pr-fm98-w9pg","severity":"CRITICAL","ecosystem":"npm","package":"n8n","vulnerableRanges":[">=1.65.0, <1.121.0"],"patched":["1.121.0"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2026-1187","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-1187","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":14,"skipped":3,"earliest":"2026-01-07","earliestUrl":"https://github.com/Chocapikk/CVE-2026-21858","repos":[{"name":"Chocapikk/CVE-2026-21858","url":"https://github.com/Chocapikk/CVE-2026-21858","stars":303,"created":"2026-01-07"},{"name":"ZeroDayEvil/CVE-2026-21858-n8n-FullChain","url":"https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain","stars":88,"created":"2026-09-12"},{"name":"sh4den/CVE-2026-21858","url":"https://github.com/sh4den/CVE-2026-21858","stars":3,"created":"2026-01-20"},{"name":"cropnet/Ni8mare","url":"https://github.com/cropnet/Ni8mare","stars":2,"created":"2026-01-12"},{"name":"sec-dojo-com/CVE-2026-21858","url":"https://github.com/sec-dojo-com/CVE-2026-21858","stars":1,"created":"2026-01-20"}]},"nuclei":[{"id":"CVE-2026-21858","name":"n8n Webhooks - Remote Code Execution","severity":"critical","path":"http/cves/2026/CVE-2026-21858.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21858.yaml"}],"first":{"date":"2026-01-07","source":"PoC-in-GitHub","url":"https://github.com/Chocapikk/CVE-2026-21858"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-01-07","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2026-21858","provenance":"source"},{"date":"2026-01-07","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/Chocapikk/CVE-2026-21858","provenance":"source"},{"date":"2026-01-09","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://beelzebub.ai/blog/catching-ni8mare-in-the-wild-cve-2026-21858/","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":74.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 295 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.92,"detail":"percentile 0.9958"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"14 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":7.0,"detail":"base score 10"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2025-61917","published":"2026-02-04","fixed":"1.114.3","kev":false},{"cve":"CVE-2025-65964","published":"2025-12-08","fixed":"1.119.2","kev":false},{"cve":"CVE-2026-21893","published":"2026-02-04","fixed":"1.120.3","kev":false},{"cve":"CVE-2026-21858","published":"2026-01-07","fixed":"1.121.0","kev":false},{"cve":"CVE-2026-25631","published":"2026-02-06","fixed":"1.121.0","kev":false},{"cve":"CVE-2025-68613","published":"2025-12-19","fixed":"1.121.1","kev":true,"link":{"from":"CVE-2025-68613","to":"CVE-2026-21858","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"npm:n8n","fromFixed":"1.120.4","toFixed":"1.121.0","daysApart":19}]}},{"cve":"CVE-2026-21877","published":"2026-01-08","fixed":"1.121.3","kev":false}],"package":"npm:n8n"}}