I just read about the Ni8mare CVE-2026-21858.
Ni8mare Flaw in n8n: What Defenders Need to Know About CVE-2026-21858
can you guys share any tips on how to protect your data on your workflows.
Hi @sudo_james
Have you read this topic?
You can run this workflow template to scan your instance for potentially vulnerable workflows:
and other tips in the topic,
Hopefully this helps 
1 Like
What Ni8mare is
CVE-2026-21858 (nicknamed Ni8mare) is a critical vulnerability (CVSS 10.0) in older versions of n8n that lets unauthenticated attackers take full control of exposed self-hosted instances. A successful exploit can read internal files, expose sensitive data, and escalate into full remote code execution (RCE).
The single most important thing you can do:
Upgrade n8n immediately to version 1.121.0 or later.
All affected versions prior to 1.121.0 are vulnerable, and the fix was released months before the public disclosure.
Thank you @mohamed3nan I read the article from Cyera (Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858) | Cyera Research Labs) , they’ were saying that the only solution to this is to update your instance. My best practice would be having a 2 factor authentication when you logged in on n8n. do you have any other best practices to make sure all your files are secured with n8n?
Thank you @Azeezat .
You Are most welcome
you can contact me anything in case you need help
@sudo_james
contact me at [email protected]
1 Like