There were some changes to the recently updated OWASP Top 10 list, including the addition of supply chain risks. But old ...
A critical n8n flaw could allow attackers to use crafted expressions in workflows to execute arbitrary commands on the host.
Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.