Self-Hosted AI Automation: Security & Patching

On 16 September 2026, n8n, one of the most popular workflow automation platforms, published 16 security advisories in a single update. Twelve were rated high severity. They included SQL injection in a database node, credential exposure, path traversal and missing webhook signature checks. n8n Cloud customers were patched automatically. Everyone running n8n on their own servers had to upgrade it themselves (n8n advisory).

Two days later, researchers disclosed “Plugin4Shell”. This flaw let attackers run their own code on developers’ machines through the plugin systems of Claude Code, Codex, GitHub Copilot and Gemini CLI, with no action from the user (Help Net Security).

This isn’t a knock on n8n or anyone else. Serious software gets serious security work, and publishing advisories openly is responsible. The lesson is for the businesses using these tools: self-hosting keeps your data in-house, but it also makes you responsible for patching.

Why on-premises still wins

We are strong believers in running automation and AI on your own infrastructure. The market is heading the same way. This month OpenText and Cohere announced agentic AI that can run on-premises for regulated industries, due in early 2027 (OpenText). WSO2 released an open-source control plane for managing AI agents that companies can host themselves (GlobeNewswire).

For Indian businesses the reasons are clear:

• Your customer data stays under your control, which matters as Digital Personal Data Protection (DPDP) Act obligations take effect.
• Your costs don’t rise with every workflow run.
• Your automations can reach systems that never go to the cloud: Tally, SAP Business One, old desktop applications and shop-floor equipment.

The part nobody budgets for

An automation server isn’t an ordinary app. It stores working logins for your CRM, email, accounting software, databases and cloud storage. If someone breaks into it, they can reach all of those systems.

Yet at many growing companies, the n8n server was set up by a freelancer or an enthusiastic developer on a VPS, and it has run untouched since. There is no named owner, no patch schedule, no alert when an advisory comes out, and no tested backup.

A recent Collibra/Harris Poll survey found that 76% of technology decision-makers hit critical obstacles moving AI from pilot to production (PR Newswire). Operations and governance are a big part of that gap.

A 10-minute self-check for your automation server

If you run n8n or any similar tool on your own servers, ask your team these questions this week:

1. Is it on a patched version? For the September update, that means stable v2.39.6 or later, beta v2.40.1 or later, or v1.123.80 or later on the v1 line.
2. Is the editor reachable from the public internet? It should sit behind a VPN, SSO or an authenticated reverse proxy.
3. Is the encryption key backed up somewhere safe? Without it you can’t recover your stored credentials. If it leaks, anyone can decrypt them.
4. Who has admin access? Remove people who have left and turn on multi-factor authentication.
5. Are your webhooks authenticated? Anything that triggers a workflow from outside should be verified.
6. Which community nodes and code steps are installed? Third-party packages are software you are trusting.
7. When did you last test restoring from a backup? Not whether backups exist, but whether you have actually restored one.
8. Who gets told about the next advisory? Name one person and subscribe them.
9. Which workflows touch personal data? You’ll need this list for DPDP compliance anyway.
10. If this server went down tomorrow, what would stop working? If nobody knows, it’s time to find out.

If you answered “not sure” to three or more, you’re in the same position as most businesses we talk to.

How we can help

At Mobifilia we build on-premises automation and AI for companies in India, North America and Europe. That includes connecting modern workflows to legacy systems such as Tally, SAP Business One and factory equipment. Keeping these systems patched and governed is part of the job we do every day.