Vulnerabilities in n8n, the open-source workflow automation platform — including Enterprise-only auth, token-exchange, and OEM-integration flaws that surface as CVEs against multi-issuer SSO deployments. Combined article + CVE feed for the n8n beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2025-68613/https://0daynews.com/cve/cve-2025-68613/n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.Thu, 03 Sep 2026 00:00:00 GMTn8ncriticalcvehttps://0daynews.com/cve/cve-2026-59208/https://0daynews.com/cve/cve-2026-59208/n8n Enterprise instances with two or more trusted JWT issuers matched incoming tokens on `sub` alone, letting a valid token from one issuer log in as a same-`sub` user under another. Fixed in 2.27.4 and 2.28.1.Thu, 03 Sep 2026 00:00:00 GMTn8nmediumcvehttps://0daynews.com/articles/2026-07-27-n8n-sandbox-escape-cve-2026-27577-bypass/https://0daynews.com/articles/2026-07-27-n8n-sandbox-escape-cve-2026-27577-bypass/Security Joes found a new n8n expression-sandbox escape while auditing the February CVE-2026-27577 fix. Update to 2.31.5 or 2.32.1.Mon, 27 Jul 2026 14:00:00 GMTn8narticlehttps://0daynews.com/articles/2026-07-17-n8n-cve-2026-59208-cross-issuer-token-exchange-sub-iss/https://0daynews.com/articles/2026-07-17-n8n-cve-2026-59208-cross-issuer-token-exchange-sub-iss/CVE-2026-59208: n8n Enterprise instances trusting two or more JWT issuers matched incoming tokens on `sub` alone, letting a token from issuer A log in as B's user.Fri, 17 Jul 2026 00:20:00 GMTn8narticle