
- Nearly 60,000 n8n instances remain exposed to Ni8mare CVE-2026-21858 flaw
- Vulnerability allows unauthenticated remote server takeover; fixed in version 1.121.0
- Shadowserver found most cases in US, Europe, Asia; upgrade is only defense
Experts have warned almost 60,000 n8n internet-connected instances are still vulnerable to Ni8mare, a maximum-severity flaw that was discovered and patched.