A critical n8n flaw could allow attackers to use crafted expressions in workflows to execute arbitrary commands on the host.
Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.
But the ban on foreign journalists imposed by Israel when the war started on Oct. 7, 2023, has remained in place.