CVE-2025-71380CWE-284broken-access-control

CVE-2025-71380

High · published July 4, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
46.5
In the wild
Unconfirmed
What it is

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading to data exfiltration, service disruption, or complete system compromise.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00571 · 46.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-07-04T06:16Z
References (2)
EPSS history
Timeline
  • 04 JUL 01:23Z
    n8n - Arbitrary Command Execution via Execute Command Node
    cvelistv5