Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-77068, CVE-2026-77070, CVE-2026-77072, CVE-2026-77075, CVE-2026-77076, CVE-2026-77077, CVE-2026-77079, CVE-2026-77080, CVE-2026-77084
By Stav Salman |
20 August 2026
n8n flaws enable code execution, injection, file read, and XSS
n8nbefore1.123.69,2.xbefore2.33.4, and2.34.xbefore2.34.1include multiple high-severity issues: expression injection, RCE, arbitrary file read, NoSQL injection (MongoDB), stored XSS, info disclosure, authorization bypass, and VM sandbox escape in the JavaScript task runner. Upgrade to1.123.69+or2.33.4/2.34.1+`.