High severity8.8NVD Advisory· Published Jul 4, 2026· Updated Jul 6, 2026

CVE-2025-71380

Description

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading to data exfiltration, service disruption, or complete system compromise.

Affected products

N8n Io/N8nllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/n8n-io/n8n/security/advisories/GHSA-365g-vjw2-grx8nvd
www.vulncheck.com/advisories/n8n-arbitrary-command-execution-via-execute-command-nodenvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000