PT-2026-55682 · N8N · N8N

Publicado 2026-07-04 · Atualizado 2026-07-04 · CVE-2025-71380

Mitre

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading to data exfiltration, service disruption, or complete system compromise.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2025-71380

Produtos afetados

N8N

Referências · 3

• https://github.com/n8n-io/n8n/security/advisories/GHSA-365g-vjw2-grx8 · Aviso do Fabricante
• https://vulncheck.com/advisories/n8n-arbitrary-command-execution-via-execute-command-node · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-71380 · Nota de Segurança