{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3an8nn8n/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:n8n:n8n:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2024-51746"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["n8n"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["n8n GmbH"],"content_html":"\u003cp\u003eThe BSI has released an advisory regarding a security vulnerability in n8n, a workflow automation platform. The flaw enables a remote, unauthenticated attacker to perform unauthorized file manipulation and potentially disclose sensitive information from the host environment. This vulnerability, identified as CVE-2024-51746, poses a risk to any organization utilizing n8n instances, particularly those exposed to the internet. Because n8n often integrates with various SaaS applications, databases, and internal services, successful exploitation could provide an attacker with access to highly sensitive credentials, workflow definitions, and data processed by these automations. Defenders should verify their n8n instance versions and ensure they are patched to the latest version to mitigate this risk.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows an unauthorized attacker to interact with the underlying filesystem of the n8n server. This could lead to the exposure of environment variables, API keys, and configuration files, or the overwriting of files to facilitate persistent access or further code execution within the workflow environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of n8n within the enterprise network and verify their version against vendor patches for CVE-2024-51746.\u003c/li\u003e\n\u003cli\u003ePatch all affected n8n installations to the latest secure version immediately.\u003c/li\u003e\n\u003cli\u003eAudit logs for unauthorized access or unexpected file system modifications originating from the n8n process.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-28T15:09:52Z","date_published":"2026-08-28T15:09:52Z","id":"https://feed.craftedsignal.io/briefs/2026-08-n8n-vulnerability/","summary":"A vulnerability in n8n allows a remote, unauthenticated attacker to manipulate files and disclose sensitive information on the platform, identified as CVE-2024-51746.","title":"Critical Vulnerability in n8n Allows Remote File Manipulation and Data Disclosure","url":"https://feed.craftedsignal.io/briefs/2026-08-n8n-vulnerability/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:n8n:n8n:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}