Articles Writeups CVE Programs

Sign in Start free

BUGFLARE

Threat intelligence and bug bounty research platform. Live vulnerability data, in-app writeup reading, and program tracking — aggregated from trusted public sources.

Explore

Articles Writeups CVE Programs Create account

Legal

© 2026 Bugflare. Publishers retain authorship; always verify on the source.

bugflare.site

CVE-2026-33696: From a Schema Name to RCE in n8n · Bugflare

In-app reader

CVE-2026-33696: From a Schema Name to RCE in n8n

r/bugbountyAugust 16, 2026Sign in to save

Sign in to like · 0

preview

submitted by /u/TradeGold6317 [link] [comments]

Source

Originally published by r/bugbounty (reddit.com).

Shown in Bugflare for convenience. Ownership and accuracy remain with the original publisher — always verify on the source when it matters.

Open original on reddit.com →https://www.reddit.com/r/bugbounty/comments/1vpx69s/cve202633696_from_a_schema_name_to_rce_in_n8n/

Discussion

Comments

Sign in to join the discussion.

No comments yet — start the thread.

Keep reading

More on Bugflare

WriteupHow to Find Business Logic Vulnerabilities in Bug BountyGo beyond scanners — find checkout, invite, refund, and workflow bugs with threat modeling, two-account tests, and impact that programs actually reward.
WriteupHow to Test for 2FA Bypass in Bug Bounty ProgramsA clear checklist for MFA and 2FA bypass testing — response manipulation, backup codes, session upgrading, and race conditions — without harming real users.
WriteupSAML SSO Vulnerabilities: What Bug Bounty Hunters Should TestTest SAML and enterprise SSO for signature issues, assertion tampering, and account linking flaws — with a safe lab mindset and clear impact language.
WriteupMass Assignment in APIs: How to Find Privilege Escalation BugsHunt mass assignment and over-posting in REST APIs — hidden fields like role and isAdmin, safe two-account proofs, and how to report clear privilege escalation.
WriteupHow to Find Blind XSS in Bug Bounty (Admin Panels & Support Tools)

Find stored blind XSS that only fires in admin, support, or CRM tools — callback setup, safe payloads, impact proof, and report structure that gets triaged.

WriteupNoSQL Injection in Bug Bounty: How to Find and Prove ImpactA practical guide to MongoDB and API NoSQL injection — operator injection, auth bypass patterns, safe proof with canaries, and what triagers accept in 2026.

Optional: create a free account to save items, track programs, and sync across web + app. Reading stays free.