Back to the CVE list
CVE-2026-21858

Improper input validation in N8n

CVSS score

10.0

EPSS probability

%78.2

Risk score

7.8

Published

9 mo ago

OverviewPublic Exploits (12)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
ZeroDayEvil/CVE-2026-21858-n8n-FullChain
GitHub

🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).

Public PoCSource updated: 28.09.2026 19:34:59
G
yym8538/CVE-2026-21858
GitHub

yym8538/CVE-2026-21858

Public PoCSource updated: 25.09.2026 11:50:15
G
Giangdurian/CVE-2026-21858-and-CVE-2025-68613
GitHub

Giangdurian/CVE-2026-21858-and-CVE-2025-68613

Public PoCSource updated: 02.08.2026 09:22:39
G
qianlijaingshan/n8n-cve-2026-21858
GitHub

CVE-2026-21858 + CVE-2025-68613 — n8n unauthenticated file read to RCE exploit

Public PoCSource updated: 21.07.2026 09:04:35
G
sh4den/CVE-2026-21858
GitHub

Proof of Concept: CVE-2026-21858 is vulnerability on n8n where unauthenticated remote attackers can access sensitive files.

Public PoCSource updated: 12.07.2026 21:42:55
G
Fomovet/cve-2026-21858
GitHub

POC for CVE-2026-21858

Public PoCSource updated: 04.08.2026 12:09:51
G
EQSTLab/CVE-2026-21858
GitHub

Ni8mare, n8n RCE

Public PoCSource updated: 20.05.2026 07:30:11
G
Bannt08/Research-CVE-2026-21858
GitHub

Bannt08/Research-CVE-2026-21858

Public PoCSource updated: 08.05.2026 08:17:48
G
masterwok/PoC-CVE-2026-21858
GitHub

Proof-of-concept exploit for CVE-2026-21858 (ni8mare) impacting n8n versions < 1.121.0

Public PoCSource updated: 16.04.2026 20:31:01
G
kaleth4/CVE-2026-21858
GitHub

kaleth4/CVE-2026-21858

Public PoCSource updated: 09.04.2026 11:12:01
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21858.yaml
Nuclei

Nuclei: n8n Webhooks - Remote Code Execution

Exploit reference
N
https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858
NVD reference

https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-21858"