Skip to content

CVE-2026-21858

Named by 3 kept items in this workspace.

Search every workspace for CVE-2026-21858. It matches the name as written, so it can find other things that share it.

The items that name it 3

  • Vulnerability Garden
    tool2026-05-13
  • Ni8mare and N8scape flaws among multiple critical vulnerabilities affecting n8n
    advisory2026-01-08

    Unauthenticated File Access via Improper Webhook Request Handling; critical unauthenticated file read vulnerability occurring when custom web forms implement file uploads without validating content type, allowing an attacker to overwrite an internal JSON object to read arbitrary files and in some ca

  • Chocapikk/CVE-2026-21858
    repo

    Content-Type confusion in n8n leading to unauthenticated arbitrary file read (BEFORE: reads getBodyData().files and calls copyBinaryFile without validating Content-Type; sending Content-Type: application/json allows controlling filepath to read any file). Advisory: GHSA-v4pr-fm98-w9pg.

All cves in this workspace.