u/Training-Money-1374

If you're running n8n self-hosted, CVE-2026-21858 is worth checking. 
It allows unauthenticated access to stored credentials via the 
/rest/settings endpoint.

Affected: older self-hosted versions that haven't been updated.

Quick self-check: 
curl -s https://your-n8n-url/rest/settings | head

If it returns JSON without authentication, you're exposed.

Fix: update to the latest n8n version and make sure your instance 
is behind authentication / reverse proxy.

I also put a CLI checker on GitHub if useful:
https://github.com/Legion33shadow/legion-n8n-shield