CVE-2026-21877 PoC — n8n 代码问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21877.yaml

Associated Vulnerability

Title:n8n 代码问题漏洞 (CVE-2026-21877)
Description:n8n是n8n开源的一个可扩展的工作流自动化工具。 n8n 0.121.2及之前版本存在代码问题漏洞，该漏洞源于经过身份验证的攻击者可执行恶意代码，可能导致完全破解。

Description

n8n versions >= 0.123.0 and < 1.121.3 contain a critical authenticated remote code execution vulnerability via arbitrary file write. An authenticated user can exploit the Git node to overwrite critical files and execute untrusted code on the n8n server, potentially leading to full system compromise. The vulnerability affects both self-hosted and n8n Cloud instances.

File Snapshot


 id: CVE-2026-21877

info:
  name: n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution
  author: s4e

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.