CVE-2026-85169

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.73 n8n versions prior to 2.35.4 n8n versions prior to 2.36.2

Description An expression sandbox escape exists in the $fromAI handler. The $fromAI handler resolved caller-supplied placeholder names without verifying if they were own properties and allowed reserved keys. When used against a primitive input value, it returned a live host-prototype reference. An attacker with workflow-build privileges can exploit this by walking the prototype chain to the Function constructor to compile and execute arbitrary code within the main n8n process, resulting in remote code execution.

Recommendations Update n8n to version 1.123.73 or later. Update n8n to version 2.35.4 or later. Update n8n to version 2.36.2 or later.