CVE-2025-71380

EUVD-2025-210426
The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading to data exfiltration, service disruption, or complete system compromise.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulnCheckCNA
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
n8nn8n
𝑥
≤ 1.114.4
CNA
Common Weakness Enumeration
References
https://github.com/n8n-io/n8n/security/advisories/GHSA-365g-vjw2-grx8
https://www.vulncheck.com/advisories/n8n-arbitrary-command-execution-via-execute-command-node