CVE-2026-21877 Security Alert: CRITICAL Vulnerability

Urgent: CVE-2026-21877 requires immediate attention.

· 3 min read

```html

Executive Summary

A critical vulnerability (CVE-2026-21877) has been identified in the npm package n8n, affecting both self-hosted and n8n Cloud instances. This authenticated Remote Code Execution (RCE) flaw could allow an attacker to execute untrusted code, leading to a complete compromise of the affected instance. Immediate action is required to safeguard your applications.

Immediate Action

  • Upgrade to n8n version 1.121.3 or later to mitigate the vulnerability.
  • If you cannot upgrade immediately, disable the Git node in your n8n configuration.
  • Limit access to the n8n service for untrusted users.
  • Review your user permissions and remove any unnecessary access.
  • Monitor your application for unusual activity as a precaution.
  • Stay informed through the official n8n advisory for any updates. [Vendor Advisory Link]

Affected Versions

  • n8n@<=1.121.2 vulnerable; upgrade to 1.121.3+

Resolution Guide

To upgrade to the secure version of n8n, use the following command:

npm i n8n@1.121.3

If you need to disable the Git node, you can do so by configuring your n8n instance as follows:

const { Workflow } = require('n8n-core');
const workflow = new Workflow();
workflow.setNode('Git', { enabled: false });

Detection & Verification

To check if your version of n8n is vulnerable, run the following command:

npm list n8n

Verify that you have upgraded successfully by checking the version again:

npm list n8n

Ensure the output shows n8n@1.121.3 or later.

Risk and Impact

The exploit allows an authenticated user to run arbitrary code on your n8n instance. This could lead to unauthorized access to sensitive data or control over your workflows, potentially impacting all users and services connected to the instance.

```

Keep reading