Critical · published January 8, 2026
🔥 An authenticated attacker could execute malicious code in n8n, potentially compromising your entire workflow automation setup! Think of it like a crafty temp worker getting access to your office files — once they're in, they can make any changes they want without raising any alarms. This vulnerability could lead to a total takeover of your n8n instance, whether it's self-hosted or on n8n Cloud. Imagine an intruder not just snooping around, but actively altering your workflows and automating their own malicious tasks. The potential fallout is absolutely devastating!
Think of it like a crafty temp worker getting access to your office files — once they're in, they can make any changes they want without raising any alarms. In versions 0.121.2 and below, an unauthorized user with authentication can exploit the n8n service to run arbitrary code, jeopardizing the integrity of your workflows.
This vulnerability could lead to a total takeover of your n8n instance, whether it's self-hosted or on n8n Cloud. Imagine an intruder not just snooping around, but actively altering your workflows and automating their own malicious tasks. The potential fallout is absolutely devastating! Upgrade to version 1.121.3 or higher immediately! To further mitigate risks, consider disabling the Git node and restricting access for untrusted users until you've patched. Don't leave your workflows vulnerable! You've got this! Follow these steps and you'll shore up your defenses in no time. 🛡️