Skip to content
skopnix

Vulnerability · NVD published 2026-01-08

CVE-2026-21858

n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the system and may enable further compromise depending on deployment configuration and workflow usage. This issue is fixed in version 1.121.0.

Signals

Exploited in the wild
Not on KEVNot in CISA's catalogue as of the last daily pull. Absence is not proof of safety.
EPSS · 30-day forecast
78%Chance of exploitation in the next 30 days, 100th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD · CRITICAL
10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

18 known · links only

GitHub PoCs · by trust, then stars17

  1. Chocapikk/CVE-2026-21858 ↗Trust ok 100

    n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)

    ★ 304 · created 2026-01-07

  2. ZeroDayEvil/CVE-2026-21858-n8n-FullChain ↗Trust ok 100

    🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).

    ★ 88 · created 2026-09-12

  3. sh4den/CVE-2026-21858 ↗Trust ok 100

    Proof of Concept: CVE-2026-21858 is vulnerability on n8n where unauthenticated remote attackers can access sensitive files.

    ★ 3 · created 2026-01-20

  4. cropnet/Ni8mare ↗Trust ok 100

    Comprehensive vulnerability detection tool for n8n workflow automation instances. Detects the critical CVE-2026-21858 vulnerability (CVSS 10.0) without performing any exploitation.

    ★ 2 · created 2026-01-12

  5. 0xBlackash/CVE-2026-21858 ↗Trust ok 100

    CVE-2026-21858

    ★ 1 · created 2026-02-23

  6. EQSTLab/CVE-2026-21858 ↗Trust ok 100

    Ni8mare, n8n RCE

    ★ 1 · created 2026-02-11

  7. Fomovet/cve-2026-21858 ↗Trust ok 100

    POC for CVE-2026-21858

    ★ 1 · created 2026-06-21

  8. sec-dojo-com/CVE-2026-21858 ↗Trust ok 100

    ★ 1 · created 2026-01-20

  9. yym8538/CVE-2026-21858 ↗Trust ok 100

    ★ 1 · created 2026-08-21

  10. Alhakim88/CVE-2026-21858 ↗Trust ok 100

    Hack

    ★ 0 · created 2026-01-30

  11. Bannt08/Research-CVE-2026-21858 ↗Trust ok 100

    ★ 0 · created 2026-05-08

  12. bgarz929/Ashwesker-CVE-2026-21858 ↗Trust ok 100

    CVE-2026-21858

    ★ 0 · created 2026-01-28

  13. Giangdurian/CVE-2026-21858-and-CVE-2025-68613 ↗Trust ok 100

    ★ 0 · created 2026-07-31

  14. kaleth4/CVE-2026-21858 ↗Trust ok 100

    ★ 0 · created 2026-04-09

  15. masterwok/PoC-CVE-2026-21858 ↗Trust ok 100

    Proof-of-concept exploit for CVE-2026-21858 (ni8mare) impacting n8n versions < 1.121.0

    ★ 0 · created 2026-04-16

  16. qianlijaingshan/n8n-cve-2026-21858 ↗Trust ok 100

    CVE-2026-21858 + CVE-2025-68613 — n8n unauthenticated file read to RCE exploit

    ★ 0 · created 2026-07-21

  17. sastraadiwiguna-purpleeliteteaming/SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit ↗Trust ok 100

    SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

    ★ 0 · created 2026-01-17

Fake proof-of-concept repositories have been used to deliver malware to the researchers who run them. The trust verdict is our engine's heuristic over the repository (account age, what it ships, how its stars arrived); it is a reason to read the code first, not a finding about its author.

Nuclei1

  1. n8n Webhooks - Remote Code Execution ↗

    n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the system and may enable further compromise depending on deployment configuration and workflow usage. This issue is fixed in version 1.121.0.

    yaml · seen 2026-10-18

On the wire

1 dispatch
  1. RT by @cyb3rops: Update: the Chinese threat actor behind the #Hermes + #CyberStrikeAI + #SliverC2 exploitation node has shifted operations to a new server ( migrated ~19 Jun 2026). Threat actor also hit http://derouter.ai, an AI-API reseller selling Claude/GPT access. Found an endpoint wide open and pulled 775 upstream API-key IDs + their ban/rate-limit status + full traffic data(patched). New infra IOCs: 203.88.119[.]53 — new primary host post-migration 137.220.144[.]253:12305 — Sliver Redirector (also ran its own independent exploit campaign vs 32 targets) 143.92.51.76[:]23175 — WireGuard/SOCKS5 exit node for scan traffic 207.180.56[.]150 — Operator's IP address Domains: 1daynews[.]app/435736b425a677a8 — public-facing CVE-intel dashboard (14,643 CVEs tracked, 20 sources, live-updating) aitoday[.]me — second service Attribution: SSH key artifact leaks username knaithe (knaithe@DESKTOP-IQA5FIU), retained across the migration. Telegram control bot (AAtttttttaccccckBot). Full China-nexus stack — FOFA / DeepSeek / GLM / dnslog[.]cn, internal agent notes all in Chinese. Shodan username via api key: crc2 @malwrhunterteam @500mk500 @MichalKoczwaraKEV

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.