VulnHub

Real-time Cybersecurity News

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control

The Hacker News
CVEVulnerabilityPatchCritical

Overview

Researchers have identified a severe vulnerability in n8n, a widely-used workflow automation platform, allowing unauthenticated attackers to take full control of affected instances. This flaw, tracked as CVE-2026-21858 and given a maximum CVSS score of 10.0, has been named Ni8mare by Cyera Research Labs. The issue poses a significant risk as it could enable attackers to manipulate workflows and access sensitive data without any authentication. Users of n8n need to take this threat seriously, as the implications of such a breach could be extensive, impacting data integrity and privacy. Immediate action is recommended to safeguard systems until a patch is made available.

Key Takeaways

  • Affected Systems: n8n workflow automation platform, all versions vulnerable to CVE-2026-21858
  • Action Required: Users should look for updates from n8n to patch the vulnerability once available.
  • Timeline: Newly disclosed

Original Article Summary

Cybersecurity researchers have disclosed details of yet another maximum-severity security flaw in n8n, a popular workflow automation platform, that allows an unauthenticated remote attacker to gain complete control over susceptible instances. The vulnerability, tracked as CVE-2026-21858 (CVSS score: 10.0), has been codenamed Ni8mare by Cyera Research Labs. Security researcher Dor Attias has been

Impact

n8n workflow automation platform, all versions vulnerable to CVE-2026-21858

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Users should look for updates from n8n to patch the vulnerability once available. In the meantime, it is advisable to restrict access to n8n instances and monitor for any unauthorized activity.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to CVE, Vulnerability, Patch, and 1 more.

Read Original Article

Related Coverage

53 DDoS Domains Taken Down by Law Enforcement

SecurityWeek

Law enforcement agencies from 21 countries have successfully dismantled 53 domains linked to DDoS-for-hire services. This coordinated action aimed to disrupt operations that allow individuals or groups to launch distributed denial-of-service attacks on targeted websites, effectively overwhelming them with traffic. DDoS attacks can cripple businesses, disrupt services, and lead to significant financial losses. By targeting these domains, authorities are sending a strong message against cybercriminal activities and attempting to reduce the availability of these illicit services. This operation reflects a growing international effort to combat online crime and protect organizations from such disruptive attacks.

Apr 17, 2026

Operation PowerOFF Seizes 53 DDoS Domains, Exposes 3 Million Criminal Accounts

The Hacker News

Operation PowerOFF is an international law enforcement initiative that has successfully dismantled 53 domains linked to commercial distributed denial-of-service (DDoS) services. This operation led to the arrest of four individuals and exposed over 3 million accounts belonging to cybercriminals. These DDoS-for-hire services were reportedly utilized by more than 75,000 users, highlighting the scale of the issue. By disrupting access to these services and taking down their supporting infrastructure, authorities aim to reduce the prevalence of DDoS attacks, which can severely impact businesses and online services. The operation is part of a broader effort to combat cybercrime and enhance online security.

Apr 17, 2026

US nationals sentenced for aiding North Korea’s tech worker scheme

CyberScoop

Kejia Wang and Zhenxing Wang, two U.S. nationals, have been sentenced for their roles in a scheme that aided North Korean operatives in securing jobs with over 100 American companies. They created shell companies and operated laptop farms to facilitate this process, which allowed North Korean workers to bypass U.S. employment regulations. The actions of the Wangs not only undermined U.S. labor laws but also raised national security concerns by potentially enabling North Korea to access sensitive technologies and information. This case illustrates the risks of foreign interference in U.S. job markets and highlights the importance of vigilance in monitoring employment practices to protect against such schemes.

Apr 16, 2026

Operation PowerOFF identifies 75k DDoS users, takes down 53 domains

BleepingComputer

On April 13, 2026, law enforcement agencies conducted 'Operation PowerOFF,' which successfully identified 75,000 users involved in distributed denial-of-service (DDoS) attacks across 21 countries. The operation led to the takedown of 53 domains associated with these attacks. By targeting the DDoS ecosystem, authorities aim to disrupt the infrastructure that enables these types of cyberattacks, which can overwhelm websites and online services, causing significant downtime and financial losses. This operation is a crucial step in combating the growing threat of DDoS attacks, which have become increasingly sophisticated and harmful to businesses and individuals alike. The large number of identified users highlights the scale of the issue and underscores the need for ongoing vigilance in cybersecurity efforts.

Apr 16, 2026

ZionSiphon malware designed to sabotage water treatment systems

BleepingComputer

A new malware known as ZionSiphon has emerged, specifically targeting water treatment and desalination facilities. This malware is designed to disrupt operations within these critical infrastructures, posing a significant risk to public health and safety. Researchers are concerned about the potential for environmental damage and the impact on water supply systems that millions rely on. As attacks on essential services become more frequent, this situation emphasizes the need for enhanced cybersecurity measures in operational technology environments. The threat is particularly alarming as it could lead to unsafe drinking water and other serious consequences for affected communities.

Apr 16, 2026

The AI "Vulnpocolypse" Is Real? - PSW #922

SCM feed for Latest

A recent report indicates that a significant number of AI systems are vulnerable to various security threats, leading to what experts are calling a 'Vulnpocolypse.' Researchers have identified multiple weaknesses in popular AI models that could be exploited by attackers, potentially allowing them to manipulate outcomes or extract sensitive data. This situation poses risks not only to companies that rely on AI technologies but also to end-users who may be affected by compromised systems. The findings emphasize the urgent need for developers and organizations to enhance security measures around AI applications to prevent exploitation. As AI continues to evolve and integrate into more aspects of business and daily life, addressing these vulnerabilities is crucial for maintaining trust and safety in AI systems.

Apr 16, 2026