{"uuid": "c9c9ff6e-81c9-4244-b801-3afe0920c6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21858", "type": "published-proof-of-concept", "source": "https://t.me/solonik_vouches/241", "content": "CVE-2026-21858 is an unauthenticated remote code execution vulnerability in the n8n workflow automation platform that exploits content-type header confusion to achieve arbitrary file reading, credential extraction, administrator session spoofing, and ultimately complete server compromise. A key development highlighted this week is the catastrophic radius of the n8n compromise: because n8n aggregates credentials from hundreds of integrated services (AWS, Azure, GitHub, Slack, databases), a single vulnerability allows lateral movement across an organization's entire digital infrastructure.\n\nDid you want full working script? Mass domain scan.", "creation_timestamp": "2026-08-18T18:00:03.995880Z"}