ThreatVectr
Tag

#n8n

4 stories taggedn8n.

Close-up of a computer screen displaying system security software with warning alerts and red error indicators flooding the interface, while in the background a
Vulnerabilities

Weekly Roundup: Trusted Software Turned Against Defenders, Plus a Critical Gogs Flaw

Signed drivers hijacked to kill antivirus, a code-execution bug in the Gogs source-code platform, and AI shortening the gap between disclosure and working exploit: this week's threats run on tools defenders already trust.

4 min read
A GitHub repository page with API tokens and authentication keys visible in commit history, workflow automation tools listed in connected integrations
Identity & Access

Leaked n8n Tokens Left 321 Live Automation Servers Open to Anyone With a GitHub Search

GitGuardian found thousands of API keys for the popular workflow tool spilled into public code repositories, handing attackers a straight path to connected apps and stored secrets.

4 min read
A computer monitor displaying workflow automation blocks and nodes, with one section visibly breaking through a red sandbox boundary line into unrestricted syst
Vulnerabilities

n8n Patches Sandbox Escape That Let Editors Run Commands on the Server

A flaw in the popular automation platform let anyone with workflow-editing access break out of the safe zone and run system commands. n8n has issued a fix.

3 min read
Illustration: two identical brass keys resting on a dark steel surface under a single overhead light
Identity & Access

n8n Login Bug Let a Valid Token From One Provider Log You In as Someone Else

The workflow automation platform matched users on a single ID field and ignored who issued the token. On Enterprise setups with more than one login provider, that was enough to walk in as another person.

3 min read
© 2026 Threat Vectr