{"uuid": "c5763307-b6b1-49f9-a064-3341e0de7395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21858", "type": "published-proof-of-concept", "source": "https://t.me/solonik_vouches/241", "content": "CVE-2026-21858 is an unauthenticated remote code execution vulnerability in the n8n workflow automation platform that exploits content-type header confusion to achieve arbitrary file reading, credential extraction, administrator session spoofing, and ultimately complete server compromise. A key development highlighted this week is the catastrophic radius of the n8n compromise: because n8n aggregates credentials from hundreds of integrated services (AWS, Azure, GitHub, Slack, databases), a single vulnerability allows lateral movement across an organization's entire digital infrastructure.\n\nDid you want full working script? Mass domain scan.", "creation_timestamp": "2026-08-19T00:00:10.313374Z"}