Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
n8n could be tricked into running unwanted code
published 26 days ago
Summary
The n8n workflow automation tool includes an issue in its zip handling component that could let an attacker place a specially crafted archive on the system and cause it to execute code without permission. This could lead to unauthorized actions or data exposure. Update n8n to the latest version or apply the vendor’s recommended patch as soon as possible.
What to do
- Update cleanstart n8n to version 2.28.0-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | n8n |
< 2.28.0-r4 Fix: upgrade to 2.28.0-r4
|
Original advisory text
adm-zip 0
Security vulnerability affects the n8n package. adm-zip 0.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published10 Oct 2026
Updated10 Oct 2026
First seen10 Oct 2026
Sources
CLEANSTART-2026-RO21037 · OSV
Track software like this
Free during beta