ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More
- ID
- 16210
- Status
- summarized
- Published
- 21 Aug 2026, 1:23 AM
- Fetched
- 21 Aug 2026, 2:19 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/08/threatsday-gogs-100-rce-n8n-workflow-to.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 7.0
- Created
- 21 Aug 2026, 2:19 PM
- Tags
- Audience
- developersvibe_codersai_agent_users
What happened
This week's ThreatsDay bulletin covers a workflow-to-RCE vulnerability in n8n, a Gogs 10.0 RCE, AI-assisted exploit research against GLM-5.3, and abuse of Microsoft Defender's signed remediation driver (BTR.sys) to bypass EDR. The U.S. DoJ also charged 17 members of the Iran-based Mabna Institute for stealing 31+ TB of academic data across hundreds of institutions.
Why it matters
If you self-host n8n for AI agent workflows or automation pipelines, the workflow-to-RCE finding means you should check your n8n exposure and patch immediately—this is a tool many builders in this community actually run. The Gogs 10.0 RCE similarly affects anyone running self-hosted Gogs instances. The Defender driver abuse and AI-assisted exploit research items are worth noting but less actionable for most builders.
Discussion angle
How many in the community are exposing n8n or Gogs instances to the public internet, and what's the practical patching posture for self-hosted automation tools that AI agent builders increasingly rely on?