🧰 n8n

The items that name it 16

• We discovered a critical vulnerability in isolated-vm a sandbox that is widely used in popular AI-related projects | Blog | Endor Labs
  advisoryas affected products2026-08-20

  workflow-automation platform (200k GitHub stars), runs untrusted Code-node scripts via sandboxed task runners and recommends isolated-vm

• Cloud Threat Highlights: H1 2026
  writeupas affected products2026-08-06

  AI tool with a critical unauthenticated vulnerability.

• Flowsint - OSINT Framework
  repoas tools2026-07-31

  Workflow automation connector integration enricher

• CVE-2026-55608
  advisoryas classification.technologies2026-07-16
• awesome-ai-security-tools
  repoas affected products2026-07-11

  agentic workflow tool covered by agentic-radar

• 8kSec AI/LLM Exploitation Labs
  courseas tools2026-06-21

  Workflow automation platform used to build the Password Bot chatbot with an OpenAI Chat Model

• Secret Scanning Dev Workstations with bagel + Fleet
  writeupas tools2026-06-04

  Orchestration tool mentioned as an example integration target for Fleet's webhook notifications.

• n8n Cybersecurity Workflows
  repoas tools2026-05-06

  Workflow automation platform used to build all described security automation blueprints

• Ni8mare and N8scape flaws among multiple critical vulnerabilities affecting n8n
  advisoryas affected products2026-01-08

  automation software; multiple versions affected across the five CVEs as detailed: CVE-2026-21858 (>=1.65.0, <1.121.0), CVE-2025-68613 (>=0.211.0, <1.20.4), CVE-2025-68668 (>=1.0.0, <2.0.0), CVE-2025-68697 (>=1.2.1, <2.0.0), CVE-2026-21877 (>=0.123.0, <1.121.3); self-hosted and cloud versions

• AI-Infra-Guard (A.I.G) — Tencent Zhuque Lab
  repoas affected products

  AI component with CVE rules added in vuln library expansion (v4.6.2)

• "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
  advisoryas classification.technologies
• Google Service Account Private Key Exposed in JWT Header
  advisoryas classification.technologies
• Chocapikk/CVE-2026-21858
  repoas affected products

  Workflow automation platform; vulnerable via Form Trigger + file upload + Respond to Webhook node pattern; local/Docker deployments store database.sqlite and config on disk enabling the chain; n8n Cloud not affected (different architecture, no local file access).

• DVLAA
  repoas affected products

  AWDP01-10 映射的公开披露开源 AI 项目之一

• Breaking the Sandbox Again: Bypassing n8n's CVE-2026-27577 Patch
  writeupas classification.technologies
• Tencent/AI-Infra-Guard
  repoas affected products

  AI component covered by expanded vuln library (v4.6.2)

In every workspace you can read 19