CVE-2025-71380 is a vulnerability in the Execute Command node of n8n that permits authenticated users to execute arbitrary commands on the underlying host system. Exploitation requires user-level access or compromised credentials. The vulnerability arises from insufficient access control on this node, classified under CWE-284 (Improper Access Control). No patch or remediation information is currently available, and the service is not cloud-hosted, so remediation depends on vendor updates or user action.

Successful exploitation allows attackers to execute arbitrary commands on the host system, potentially resulting in data theft, disruption of services, or complete compromise of the affected system. The vulnerability requires at least user-level privileges, but no user interaction is needed once authenticated. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Execute Command node to trusted users only and monitor for unauthorized access. Consider disabling or limiting use of this node if possible.