Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.

Attackers could even have used one vulnerable Lookout user to gain access to other Google Cloud tenants' environments.