Co-op Cloud Security Advisory (DEMO) CCSA-20260915-01

Recipe:: n8n

Affected Versions:
1.0.0+1.81.2
2.0.0+1.114.4
2.1.0+1.120.1

Affected Images:
n8nio/n8n:1.81.2
n8nio/n8n:1.114.4
n8nio/n8n:1.120.1

Upgrade paths:
1.0.0+1.81.2 -> 2.2.0+1.123.9
2.0.0+1.114.4 -> 2.2.0+1.123.9
2.1.0+1.120.1 -> 2.2.0+1.123.9

Description:
Docker images "n8nio/n8n:1.81.2", "n8nio/n8n:1.114.4", and "n8nio/n8n:1.120.1," used in the Co-op Cloud n8n recipe, for versions "1.0.0+1.81.2", "2.0.0+1.114.4", and "2.1.0+1.120.1", are vulnerable to CVE-2026-21858. This CVE, dubbed "Ni8mare," is a CVSS 10.0 (maximum score) network accessible, unauthenticated, remote code execution that is trivial to exploit. It has an EPSS (Exploit Prediction Scoring System) of .78 meaning it is 78% likely that instances of this vulnerability have been or will be exploited wihin he next 30 days. Upgrade immediately.