Expression-Injection

n8n Unauthenticated Arbitrary File Read to RCE Full Chain — CVE-2026-21858 + CVE-2025-68613 new EPSS 78%CVE-2026-21858, CVE-2025-68613webCRITICAL 10Patched2026-07-05