PT-2026-55682 · N8N · N8N

Published 2026-07-04 · Updated 2026-07-04 · CVE-2025-71380

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading to data exfiltration, service disruption, or complete system compromise.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-71380

Affected Products

N8N

References · 3

• https://github.com/n8n-io/n8n/security/advisories/GHSA-365g-vjw2-grx8 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71380 · Security Note
• https://vulncheck.com/advisories/n8n-arbitrary-command-execution-via-execute-command-node · Note