Two vulnerabilities in the n8n workflow automation platform could allow attackers to fully compromise affected instances, access sensitive data, and execute arbitrary code on the underlying host.

CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable Python to evade detection and persist on high‑value systems.

Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.

It seems tame today!

This week’s cybersecurity recap highlights key attacks, zero-days, and patches to keep you informed and secure.

The news follows a startling break in nearby.