Show HN: CLI tool to check n8n instances for CVE-2026-21858 credential exposure

LegionAPI1 pts0 comments

GitHub - Legion33shadow/legion-n8n-shield: Free CLI security audit for self-hosted n8n · GitHub

/" data-turbo-transient="true" />

Skip to content

Search/

Sign in<br>Sign upAppearance settings

You signed in with another tab or window. Reload to refresh your session.<br>You signed out in another tab or window. Reload to refresh your session.<br>You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

{{ message }}

Legion33shadow

legion-n8n-shield

Public

Notifications<br>You must be signed in to change notification settings

Fork

Star

main

BranchesTags

Go to file

CodeOpen more actions menu

Latest commit

History<br>4 Commits<br>4 Commits

Folders and files<br>NameNameLast commit message<br>Last commit date<br>README.md

README.md

legion_n8n_audit.py

legion_n8n_audit.py

View all files

Repository files navigation

LEGION n8n Shield

Free CLI security audit tool for self-hosted n8n instances.

What it checks

n8n version exposure against recent critical CVEs

public reachability

missing security headers

Docker Compose risks

SQLite usage in production

missing Docker volumes

exposed port 5678

missing restart policy

missing N8N_ENCRYPTION_KEY

Usage

pip install httpx<br>python3 legion_n8n_audit.py --host https://your-n8n-domain.com<br>python3 legion_n8n_audit.py --host https://your-n8n-domain.com --compose ./docker-compose.yml

Example output

SECURITY SCORE: 24/100

CRITICAL:<br>- No Docker volumes

HIGH:<br>- SQLite detected in production<br>- Port 5678 directly exposed

MEDIUM:<br>- Missing restart policy<br>- Missing N8N_ENCRYPTION_KEY

Services

If your score is low and you need help fixing it:

Written Audit Report — €199

Emergency Hardening — €750

Full Secure Setup — €1,500

Monthly Maintenance — €300/month

Contact: api@legion-api.com<br>Site: https://legion-api.com

About<br>Free CLI security audit for self-hosted n8n<br>Resources<br>Readme<br>Activity<br>Stars<br>0 stars<br>Watchers<br>0 watching<br>Forks<br>0 forks<br>Report repository

Releases

Packages

Contributors

Languages

You can’t perform that action at this time.

missing legion security audit legion_n8n_audit docker

Related Articles