Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
n8n is an open source workflow automation platform. From version 0.187.0 to before 1.120.3, a command injection vulnerability was identified in n8n’s community package installation functionality. The issue allowed authenticated users with administrative permissions to execute arbitrary system commands on the n8n host under specific conditions. This issue has been patched in version 1.120.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-04 | 3 | Disclosure2General1 |
| 2026-02-05 | 1 | Patch1 |
n8n is vulnerable to a critical command injection flaw (CVE-2026-21893) in its community package installation. Update to 1.120.3. #n8n #CommandInjection #infosec https://www.pulsepatch.io/posts/cve-2026-21893-n8n-command-injection
Post summary
The post alerts users to a critical command injection vulnerability (CVE-2026-21893) in n8n and recommends upgrading to version 1.120.3 to remediate it.
CVE-2026-21893 Command Injection Vulnerability in n8n Workflow Automatio... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21893 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces CVE-2026-21893 as a command injection flaw in n8n, links to a details page but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-21893: n8n RCE: Automating Your Own Demise via CVE-2026-21893 A critical OS Command Injection vulnerability in n8n's community package installation logic allows authenticated administrators to execute arbitrary code on the host server. The fl... https://cvereports.com/reports/CVE-2026-21893
Post summary
The text announces a critical OS Command Injection vulnerability in n8n's community package installation logic, but provides no PoC, exploit code, active exploitation evidence, or patch details.
🚨 CVE-2026-21893: n8n Vulnerable to Command Inject... Admin-to-root privilege escalation in n8n via package installation API - trivial command injection with zero input sani... https://zerodaysignal.com/vulnerability/CVE-2026-21893 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
CVE-2026-21893 is a command injection vulnerability in n8n’s package installation API that enables an admin to elevate privileges to root due to missing input sanitization.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n8n | n8n | - | node.js | - |