Two critical n8n flaws (CVSS 9.4, 9.5) enable RCE via expression sandbox escape and public forms, risking credential exposure ...
The critical vulnerability affecting both cloud and self-hosted n8n instances requires no authentication or even n8n account ...