n8n
Ni8mare (CVE-2026-21858): Patch n8n's CVSS 10.0 Webhook RCE and Rotate Your Credentials
Patch Ni8mare (CVE-2026-21858): upgrade self-hosted n8n to 1.121.0+ to fix the CVSS 10.0 webhook RCE, verify the fix, and rotate all exposed credentials.
Patch Ni8mare (CVE-2026-21858): upgrade self-hosted n8n to 1.121.0+ to fix the CVSS 10.0 webhook RCE, verify the fix, and rotate all exposed credentials.
n8n's October 14, 2026 security bulletin ships High-severity fixes. This guide maps each release line to its patch version and walks through a safe upgrade.
n8n issued three advisory batches in September 2026, most without CVE IDs, so scanners miss them. This checklist maps each batch to its patch versions.