FAIL › dossier
n8n
VENDOR· dossier confidence 50%
n8n is an open source workflow automation platform with a history of critical and high-severity vulnerabilities, including remote code execution and shell sandbox enforcement failures, indicating a need for improved security practices and patch management.
PROFILE
Categoryworkflow automation platformWhat they don8n is an open source workflow automation platform that allows users to create and manage automated workflows through expression evaluation and dynamically managed code resources.
SECURITY POSTURE
The company has a poor security posture, evidenced by multiple critical and high-severity vulnerabilities related to remote code execution and shell sandbox enforcement failures in its workflow automation engine.
Notable failures
- CVE-2025-68613 RCE via expression evaluation
- CVE-2026-65590 shell sandbox enforcement failure
- CVE-2026-27577 unspecified critical vulnerability
Patterns: repeated unpatched edge-device RCEs; failure to enforce shell sandbox restrictions
FAILURE HISTORY · 6
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-03-11 | CVE-2025-68613 | high | n8n workflow expression evaluation allows remote code execution via dynamically managed code resources. |
| 2026-03-11 | CVE-2025-68613 | high | n8n workflow expression evaluation allows remote code execution via dynamically managed code resources. |
| 2026-07-22 | CVE-2026-65590 | critical | CVE-2026-65590: n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restri |
| 2026-07-22 | CVE-2026-65590 | critical | CVE-2026-65590: n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restri |
| 2026-02-25 | CVE-2026-27577 | critical | CVE-2026-27577: n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2. |
| 2026-02-25 | CVE-2026-27577 | critical | CVE-2026-27577: n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2. |
Open questions: What is the exact founding date of n8n? · Where is n8n headquartered? · What is the current size of n8n's workforce? · Who owns n8n? · What is n8n's official website URL?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-27 04:06:43.477615+00:00