Topic

Cve 2026 103251

Coverage tagged cve 2026 103251.

Articles: 1
Desk: 1

Data graphic: n8n queue-mode flaw CVE-2026-103251, where write access to Redis can install any npm package on every instance, shown with a CVSS v4.0 High score of 7.5. Redis write access is the precondition; no known exploitation; not in CISA KEV; fixed in 2.40.1.

elevatedAI Security Cve 2026 103251

n8n Queue Mode: Redis Write Access Can Install Any npm Package on Every Instance (CVE-2026-103251)

n8n's queue-mode handler skipped name, permission, checksum and npm safety checks, so Redis write access could install any npm package cluster-wide. Fixed; no known exploitation.

Oct 3 · 5 min