MalwarePublished 13 Jul 2026Updated 1 Sep 2026

n8n-nodes-rce-poc (npm) · Malicious Code

Affects n8n-nodes-rce-pocSource GCVE Database

Malicious package : remove n8n-nodes-rce-poc and rotate any secrets on hosts that installed it.

Data as of 12 Sep 2026, 15:33 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10503

What to do

Remove n8n-nodes-rce-poc from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmn8n-nodes-rce-poc	Affected =1.0.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The n8n-nodes-rce-poc npm package is a malicious package that provides a remote code execution (RCE) capability when installed in an n8n instance. It executes shell commands on the host system using environment variables to control the commands and exfiltrates command output to attacker-controlled URLs. This package breaks the intended sandboxing of n8n workflows and should be considered fully compromising any system where it is installed.

Impact

Any system with this package installed is fully compromised, as it allows arbitrary command execution on the host and exfiltration of command output to attacker-controlled endpoints. All secrets and keys on the compromised system should be considered exposed and require immediate rotation. The presence of this package breaks the security model of n8n workflows and can lead to complete system takeover.

Defensive guidance

Remove the n8n-nodes-rce-poc package immediately from any affected system. Rotate all secrets and keys that were stored or accessible on the compromised host from a secure, unaffected system. Because the package grants full control to an attacker, assume the system is fully compromised and consider rebuilding or thoroughly auditing the host.

Summary

The n8n-nodes-rce-poc package, when required by n8n, executes shell commands via execSync using the /bin/sh shell. The command executed is controlled by the environment variable __N8N_RCE_CMD, defaulting to a command that leaks host identity. Additionally, if __N8N_RCE_CB is set and EXEC_MODE is 'webhook' or 'both', the output of the command is serialized and sent via HTTP POST to the specified callback URL, enabling data exfiltration. The package exposes an execute() method that allows arbitrary shell command execution on the host, bypassing the n8n workflow sandbox. The package is self-identified as a proof-of-concept for remote code execution and has no legitimate use, effectively providing a drop-in RCE backdoor.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 12 Sep 2026, 15:33 UTC

Technical details

References

Community reviews