CVE-2026-21858: n8n Unauthenticated File Access via Improper Webhook Request Handling
Summary
CVE-2026-21858: n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling. Affects n8n versions < 1.121.0. Fixed in 1.121.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
n8n is an open-source workflow automation tool that allows users to connect various applications and services to automate tasks. It provides a user-friendly interface for creating workflows that can be triggered by events or scheduled to run at specific times. However, a vulnerability has been identified that allows unauthorized access to files on the server, posing a significant risk to sensitive information.
Vulnerability Detail
The vulnerability arises from improper handling of webhook requests in n8n, which can be exploited by an unauthenticated remote attacker. By executing certain form-based workflows, an attacker can gain access to files on the underlying server. This could lead to the exposure of sensitive information and potentially further compromise the system, depending on the deployment configuration and the specific workflows in use.
How To Fix
Latest published version: 2.44.6 as of 22 Oct 2026
npm install n8n@2.44.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.121.0
This is the first release that contains the fix.
npm install n8n@1.121.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary mitigation, users may restrict or disable publicly accessible webhook and form endpoints until they can upgrade to the patched version. This can be done by modifying the server configuration to limit access to these endpoints.
Conclusion
The vulnerability identified in n8n allows for unauthenticated file access, posing a significant risk to sensitive information. Users are strongly advised to upgrade to the latest version to mitigate this risk. Temporary workarounds are available, but upgrading is the most effective solution.
See every vulnerability recorded for n8n →
FAQ
The vulnerability allows unauthorized access to files on the server through improper handling of webhook requests.
An attacker could expose sensitive information stored on the system, leading to further compromise.
You can use the Vulert playground at Vulert Scanner to check for vulnerabilities in your application without needing to sign up.
Yes, the issue has been fixed in n8n version 1.121.0. Users should upgrade to this version or later.
The CVSS score of this vulnerability is 10.0, indicating a critical severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for n8n.
