# #91 - January security roundup: CVSS 10 in n8n, self-hosted AI scares, and nonstop patching

Page: https://stenobird.com/podcast/the-devsecops-talks-podcast-1222637/91-january-security-roundup-cvss-10-in-n8n-self-hosted-ai-scares-and-nonstop-patching
Text version: https://stenobird.com/podcast/the-devsecops-talks-podcast-1222637/91-january-security-roundup-cvss-10-in-n8n-self-hosted-ai-scares-and-nonstop-patching.md
Podcast: [The DevSecOps Talks Podcast](https://stenobird.com/podcast/the-devsecops-talks-podcast-1222637)
Published: 2026-02-04T22:51:46+00:00
Episode link: https://devsecops.podbean.com/e/91-january-security-roundup-cvss-10-in-n8n-self-hosted-ai-scares-and-nonstop-patching/
Audio file: https://mcdn.podbean.com/mf/web/z1k76t3qzt6xs7y7/091-january-security-roundup-cvss-10-in-n8n-self-hosted-ai-scares-and-nonstop-patching.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/the-devsecops-talks-podcast-1222637/episodes/91-january-security-roundup-cvss-10-in-n8n-self-hosted-ai-scares-and-nonstop-patching
Duration seconds: 2641

## Resource

We kick off with a CVSS 10 in n8n, then look at self-hosted AI assistants with weak defaults and prompt injection risks. Are your API keys, inbox, and drives safe if a bot is open to the web? What should you rotate, patch, and hide behind a VPN? We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.DevSecOps Talks podcast LinkedIn pageDevSecOps Talks podcast websiteDevSecOps Talks podcast YouTube channel

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/the-devsecops-talks-podcast-1222637/episodes/91-january-security-roundup-cvss-10-in-n8n-self-hosted-ai-scares-and-nonstop-patching/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/the-devsecops-talks-podcast-1222637/91-january-security-roundup-cvss-10-in-n8n-self-hosted-ai-scares-and-nonstop-patching.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.